sssd-ipa-1.11.7-6.fc20$>$0Sg XPGv,><D?4d   6 $BHPd n x  Q Xl))) $)(88@9 x:2CG(H<IPXXYd\]^b7d!e&f)l+tDuXvlwxy!0Csssd-ipa1.11.76.fc20The IPA back end of the SSSDProvides the IPA back end that the SSSD can utilize to fetch identity data from and authenticate against an IPA server.Ubuildvm-10.phx2.fedoraproject.orgZFedora ProjectFedora ProjectGPLv3+Fedora ProjectApplications/Systemhttp://fedorahosted.org/sssd/linuxi686K`A큤AUUT1UU1686b8ce2422b7871808978f2bbbaeab9aea4349b7312b9eef65ac063466a3108ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903c89c9c903c303b14932f7842962b3ec4a6bdeed954b5a9ebf2db8eeb56a90a84rootrootrootrootrootrootrootrootrootrootsssd-1.11.7-6.fc20.src.rpmlibsss_ipa.sosssd-ipasssd-ipa(x86-32)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@   @ bind-utilslibc.so.6libc.so.6(GLIBC_2.0)libc.so.6(GLIBC_2.1)libc.so.6(GLIBC_2.1.3)libc.so.6(GLIBC_2.2)libc.so.6(GLIBC_2.3)libc.so.6(GLIBC_2.3.4)libc.so.6(GLIBC_2.4)libcom_err.so.2libdhash.so.1libdl.so.2libglib-2.0.so.0libipa_hbac(x86-32)libipa_hbac.so.0libk5crypto.so.3libkeyutils.so.1libkrb5.so.3libkrb5.so.3(krb5_3_MIT)liblber-2.4.so.2libldap-2.4.so.2libndr-nbt.so.0libndr-nbt.so.0(NDR_NBT_0.0.1)libndr.so.0libndr.so.0(NDR_0.0.1)libsamba-util.so.0libsss_idmap.so.0libsss_krb5_common.solibsss_ldap_common.solibtalloc.so.2libtalloc.so.2(TALLOC_2.0.2)libtevent.so.0libtevent.so.0(TEVENT_0.9.9)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rtld(GNU_HASH)sssd-commonsssd-common-pacsssd-krb5-commonrpmlib(PayloadIsXz)1.11.7-6.fc203.0.4-14.6.0-14.0-11.11.7-6.fc201.11.7-6.fc201.11.7-6.fc205.2-1sssd1.10.0-8.beta24.11.3UT T@T$T$TwT Sh@Sh@SG@SCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 1.11.1-6Lukas Slebodnik - 1.11.1-5Jakub Hrozek - 1.11.7-4Jakub Hrozek - 1.11.7-3Jakub Hrozek - 1.11.7-2Jakub Hrozek - 1.11.7-1Jakub Hrozek - 1.11.6-3Jakub Hrozek - 1.11.6-2Jakub Hrozek - 1.11.6-1Jakub Hrozek - 1.11.5.1-1Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- backport fixes from upstream- sssd_be crashes in nested LDAP code in case of ldap error - Resolves: rhbz#1126557- Backport an upstream patch to ignore PAC verification failures- Fix a sysdb lookup error that resulted in IFP not returning subdomain users- update the libldb requirement to 1.1.17, which is required by Samba- New upstream release 1.11.7 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.7- Start before systemd-user-sessions.service and nss-user-lookup.target- Do not crash on resolving group SIDs in IPA server mode- New upstream release 1.11.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.6- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use lib in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code)1.11.7-6.fc201.11.7-6.fc20libsss_ipa.sosssd-ipaCOPYINGsssd-ipa.5.gzkrb5.include.d/usr/lib/sssd//usr/share/doc//usr/share/doc/sssd-ipa//usr/share/man/man5//var/lib/sss/pubconf/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m32 -march=i686 -mtune=atom -fasynchronous-unwind-tablesdrpmxz2i686-redhat-linux-gnuELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=9314c9f370e2cda68e9d076ba2f6bc9c9c39dd98, strippeddirectoryASCII texttroff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)!PRRR RRRRRRRRRRRR RRRRRRRR RRRRR RR RR$?@7zXZ !PH6r]"k%f@}|,p37oH?zx=3 z©ogjP;$$'eoz :3Jd.1 G83SmOle Mgӧcֽ}T[4*ɰߦ۰p-wRިDB7LLhӣ,fbT !pY} uv8ͥI;p)eMHh[Ag;e3 GKpAqt=֡gAD \|]ϦI)-7 9vR%aHQlx [Roe變!PPʃ3*Hmo$y"K=fMŪp)@7R2\ɛ0UoѰ۵F)OU#:\mdcPCpkp;<;;wDCM1#)M=CzܗHνC$<S`jq,[PC$Zocm=9fU6"?G}nKV}ƥbO$Z;1k\Vq{&9 _wttX9k}nUv=jnEB-q0aVĆ'?RdP؂& <ם@jBn*8~) ]N##0rZĶƂTM7cVvy<$ؘ ?1"ZՌx*/AoLۏ.ѹB qQ< \oʢձ-@r ~moqfeH6X$QO t5r.{5 &0";i)Wa7eߝs셆rJ=}ǖinγ>x;xj'Z45 6@Btq:,'bnp*e${B=/DKdHJmLj+jҿiF[A1|YRO^AÀEߵ4ZM]bdP=EʧI rq?wlhST()Kh:\tp:%ۥ,AAv۟]MYq7om^ء}, 獌Oq3a_Bn*qv =>!N7?ҥ4)fr-FJ6/ w\}$AZ' sn['IBH~wX8vkh&'23 ,eZZP85] Z ny_M]vl椦ѕ;WUb93KgYc)e+A$&؊}[/$oA~C攔cHuEDF e!AyNf]:~Wq*WVVLo&eVLwj_ZD2ʔfb@k"cEL-n֎`/|t%:ٍ(C!ތ~L/C΂9/\' 4 j8k[B qEG'#|*ymq.\ n(@2ǫ1LpO! -+צ5WP֤A"E2C0(BI1 ܾ1h8wuUMoԽ%,8GJ\Bt==?Reބ/.g@p鵤y /(<8&%, wy`$Q.`lJ,w"lwUTeBjAR\r 5t̾eKڅ"e.swìQugKez zKh*mo H%AV?^E@}-@@>P1Rx_%#Ui+yqwBo;&nwv"g1MM%? ec1fߎBSq?_oLbć h؆ )8ϴ%Z' .6w-Q1[Ӟ xTRˮaDcXCOf~8m륲xN"Ng|w>#2(X@4$z]->OX#̌T(L^[.R/PU*~8` 9l6:7͸M$9n% gLA'*IDGAj+*_G\+Fc1V-Ǚj>fPQ!.6bUfv&u0ZKLR*tS6O *ɟN΄tmf,|Y$K&'YxJeOZ1kӚVj.VP^ڕs[X"~X;eG8B 7ȏQ v w('q2D|@0oЧ/vdqⶇaE4}sr R)`cLt;%NNA8ܪZ1co倥 >;3JSE( 1+ދ3-كU*PbKoD{ ELN#.Z0TbEpcaK6Z'P7B@1Ƞ! m:2F[yÎ` cv')ATolh̾5)FZ[t7]G' s1eu#ԘZKoO sIX a-Z^BowXt*p .@J%F_QKy3#j#h&lKE&繈)2rgdkz$FC=H^SR0]Z0N5FA3r /ze?;lXNM2yDN9qhTtxU=yS\'@*Ob^ &[dޡOVzZ=:BU`qK!rIKx*jy.PK Z*Jj.+rK&Orrގ*3[^XHp`}KuOK"/Qݜ[ HrX`F9 XW)`.c-[XȜPAuc ژNC <^Kbnhbz|hQ=P6'R[Z^U-Eu?cUNvc\JL1sw M'*=r| \33PH ^nS&{IrP:/Hr"4? 5Td>S'_-pLeYI~x]c?2{Z'f<^?_T=I_O[S92U9y6g#^ QA; &:ӇuUKzќΩ^® +iśS lFЀiZNSQy>W`8܆dqqPLtnKo[y`ߵpombUc؏ k>IXGdĄ暃l ;2[-H S1iG<˩An}z< $(/ xwUF9N'u=?XV"JVm<1m>@\)PO[cWu-0ͣG152E`b(ot+/„Dj]äymb /kZ<ݍn΢QOLIұܒ4=Ǫ=pDDqGtiJV:/I>}d0fU |=6"FZ-cD\MJ6Wadh"ɝ\p̊bC|d)l 2ݏS\M,{'.smb|tнÆM*uƸGa*u5 n67OV?RuM"b`d6`HSeKͰ|:O<0;ޱPдdF\O%/}g*1d LyI"k1B48w1fOSC'zL?Q=bPs%ا"eh |P q)ꇠ *gGR3[10ѫ/~b YTUä Xp,i]EH{2|4YQN~[BGBoL&,E)`|e?4u囨~ye{-"I Յ2L5Wv KGKqPuuD͊4dgrC }Zs7цUo_*c*=O5#E8 .2q~6O2g8ç|^ YUΏ9偬Q{h f(+uiNrygiJem F772]Sk=Bǁ:Q0jӊ-`.肸)|-:FB&anrm|EAM C6#rTtkB<"Na-_A o{*ҡ%~" 4ۢ7'؝m$/!|JW*_¦M:Gj A't IbB]%m/Դ) yˡt/[w򅯍?"!E_~U5`A^Uo^GUNo+9ҫg_I&7ق>L*U2igZ]QoK17]ĸCSegn{ ܊5p;n &` :=%poЌ<YrJux\̹ 7V Xw"$=k/TP;,|!0Ֆ.PC;+l1}7 9utbh;'^.U*& *,^7oR Qv09}̫'ˤ0Ԡ3;,[<>~/c7la: P*t,jkW~op;);gZG®~ZQ m?*j̷9D@:',NZ_ !(ZÂ\q( lsM'@x MYGJD!JH>P-dXpuCP;+ %#I<낱vwԲ+Pėo՟\zBER_=<<u2# ]@UM7C#3cH0pD]y' Z t,J ŀ|g\zYl]Nhz|4R4i~:([Z6l|qB^' P#=̤%~Qڈ+q>J6d;aU:xx-QiprҚrW5ɭ<@J䋞yVF49yaǑ]g< ]4͡?:>7/[3*7U.~ܧ -XRbi%R=YZ&vayft̸bh<oj7Z`H\ه͙l t@QQg(!5Nfɿ`-y o$'msMSA7p]:#xlH}&e7Iy2Cs>:#Tr.$blW h@N)υ kv󌠑,ֳ0T ǩ}-^ d4hƹ6=fͼFzؕK-]Wڄ\.0A5A 'џN?|U\ s=j¤5L,'m% @YwH12}rr{>TxYۛyIqra(s8 MS7}1uUB2M ׀iB_0>HlxzFܯNYi-XR{AZo-Np9(5. Ԍ//[vxcPݦgI 'Mpᎋ}# Uapx@SoSr^L]wܳw^yetsDP~˫Z\7IȋqERXX.O21P2kYX366fp}5I8GnEE>6cn|v,g ě eڸhW9FR <*I0q+D;}[{IIR}CW(weHk[(Zk[;ɋ =T50`$X0(jϟ71=! h/x!O +VUI^޻onL^.]"|G허Й|VЭWzHK;p^.MY+\<6ku[te{"B`;syr_٘G6g= a&.r{vR]dsWTCwNᖍtpD#iXH`2rՀ#Sa O&1k:͙+'| 䆬{O/(3{FeI¢ YyAtDY?fl^Gqn<`9aUj9q1  D([;V/Q^($AD't[ݎ=XX_Ëu<((*mof=v ¥nGӋݛCöu-Jܪe: b*#(0RkyP|$<zULg RM9GR'ђgMCC-L⬸WchK%!5w>:|8[lf~>p @piIOqC^-ZSiVo 6j`E훬Y9+;ǿy=U_] %x~zodDDp˪9de=v!8-EXրỌ25m u( //vU~ƝҦ=C"e 3V0YW*~"Q\K6s8uqNmt&>ܑNF*҅$y6ʰ\~~ܶO}q_osצw@r&XgL,ȑRMl 쯌ۍSoaԜuTifPw3#2=L Qpjv$x9+He)?NÒ|sW%@{.} ̹%nۛ-m98D ~^;߸@zwFS("`I}H|Fb KSmR.jܒ?ir/(';{|3oW-иAAh8)Ze{! &'Wda.`;JM5I ViufWx ޸)s{ c*wf@g1թs-:NӁkmS tC,ٲa @!+(7],EexUË@_JuW=nvDHJ+H# ׾0)qN8oubIkIn)w? >H)F+Dzٽ> TocjvǮ_4b^G&sGB2rx⢢+({+ la]F @bs! od翐0)Y>hY!$rE&.h @C'4+J{ ڎ'kl_p\LFev5=/Zn&}iVוH%u7ҎŒ: 4T9/}IGCoT{Gfrh%ˈ*ELI-0kH6| #E?IltN{&]4T/&g34QDBUQ>'A`<& UUIzׁ),eCƈ(tVۜjN tϋy )wm[!,)B=Cx:l8:N)fkגp1? z=kOT2v4+ ,>(͂&>d?]Fi/%>עF/LJ+sa 0 nj~}uoXjvw "RSz"MΌ5/q~뎐:JÄ("][ک*ǃ$$),[0,i3%A狙~Eʻ>lpL=h<{IB;`L.?Q]{+ '&[.Tg*u_ zCSkq~E^@tzd{a Fs6"!.1r$if$zsfr-u32w1s0wN B"K]pg:y }ou>7;\mMnNN'2a Ю Qh$zHe@\OI:si~ /NdaL!i%- M!%blbw I]Xō ,#!U:_2 RQ#Oę#"dXWNQO'H(f6n2ĉ4yܤb_Pɧ.cL4\rBGy*,?YS`JjfWe5KM*x /jM7u`gT3Y,'r޳<>bzWfhve߹jr:#J:@{ Dɢk:R+nz 5Ĺo?Ad9Jí&h5hhw.#8z}R|@HtD '!X\,$uCd+_182 -eUQ#D#T:{Ts0H8 Kɼ, eJ:wM: $N1BkԚ .k%]8Ø^+Dƫ $BnGS,-v[g+*I*z!YT+ dž~MjBhX=(1p@SvzW?4J{\ Vb~Ϫ+ۊYVۊ#"=*gp;l,זM~\RHͬ:Ɇ0#6!C5iET*KL2'82Ps^n30x@I|q\FE{Į&5ftA|]+!pCD3ߏ V_V}Ei&ػϓiu2F~ePjf yGuhn79Td(n?[Z5.2\. ݥs 5ݤ>H xz e2{D]5lUN-Fvrsʓ[+4/Yv/ &(|Z~KX`͂,];l@qya*sޕ-3$׈ɘbW3zH:,~[KhT`F>^W)==v6$vJ)Pvm(^^9_ ی\K(8 18$]B(#jHBkDcMDlg]^Ǹ ].?Iݔ9k"PMpmx'X/%kA# @cC(.[10g>Iy:n=u|05gL!~ aly\Nr)hy9,̼Wg?T\#^a FgT/l7; D\w}lA{6蕶 ugG?):B-'̩43^9"4~W KӦ'0\?GibbH 5g̵+1u" lၽZx}ZYMƽ҅!XVU |aC A_{":()Q,S{OӱƤj#Q+\JSl`>H]Aj%%̕5AM0-LPk Q]2N-R7bhb*8Ɖ<`qO+Ȣԕok%ܮ{lhC l" ԁH0woX@Ka&K.)6D%5+6;Bkya^zd&W/CG1!器 A%j-*B^y ~ Ƴ ~k-ggszpQ rHwls E,o| 0uu%Rߤ6P#;J'8?y78qv,o1HȽZJbZ)Ն1~/(0š SqE?' oe_9/.6|Pل _Kˮ4Lw]95҃ ^AوO~ŷ- F6-k E Ȏ)Y.sk PZ){#MEIB86'caNs)J7!J^L|fx8|_QZWU޸Iy&˱0M89vWDq] TO S`dM9G>Htۊtlu;n, =wjQ3/*pjkE|YcVfW6IG}hB%'D h0a( J -_yx2Vmjt۱ז CY% rryqW?þWblJ:\ʐ:"+DH`@¶&s";auw @^\hq&K1\ʢPTl"}ٴCk>{)Q~Aa7Okuf[ڧ g@C?.e?Θ0P&Ҍ>2jnBm~W;p'&0ˁ^beэEg#ӰaczH]?(ѾAגj%=se!Tx L)) YpU%n~:o))J|4; ,Rb[  _ndU SiLaRjpc ЖFB3?~/ =3Y3ud-ܫ8eS[<-r|/vd/"e=aG_m-  UN1룏r[.z*o4Ĝ(=ߦngE6;kOH9#O41{NZ^Bfc|hoGKu<|hC=IA&àh4s1*}Wvo4~7CN_E.A8^cٟ,zY9g]1x [1mxNOS15iWLnQW$U;aY\EҵYkNn S>˥H_hD|#chjúS->uY,)ryjN1ֹ* gDju*-숃r.3ѕ2牮o, }qWD75lȓ@5_xcJ =$M ~(D"/㥿3pr--u"HG"|U8f"۽j-qdT?^zSjyeހ]YuM@"0 YM*rjY52QoqTCf1.lu2r>RˏQaN:>.\oUmdO`^ x-QWnC!V2d`w RZ۸\QmV -!V[^l$psfx}+*Ug^P aWR*#->9$;Qv w8sj5u0 *CdCV܇{NcOVaBeԈ`/yo~/&@z.HjۈFE;(h>u qܕ3$FѪ4I<]O%tr5?rtS+naQ~]BBcFk4_c j'>8Gi1n'`mk#Ff4xY; n?fҐ|enZI}G_nj赬&w5+Qeu#q 753Ly"hѝ پ~j62i/I77~ GOg$8q@TuhæEiɔ4%TS.A0l6&=^S: 2m?H2LcY$lwۅXݩ7H51bŧ*APd umDCYyw,tӺb9A)͘PWtU67yn+)5s[b)B'b6y}Bp qSZkjD#+d8#"M;9]"StޜPPh{?BmD㉯.tF&pW&dI%A֥ӷ%fټNC4cl( 'N)7-3ԘёE7Ufi705Mq "6¥A`}bDJMbq=+Y7edsIy>Ngz;:A9},"۪xTX]|Q$CSrX ,ZXЉɧZ)FAh2,H;fwcI(aP3'4I7FLP3Gh@vor/l;n?񦱙SLR>IEܑ4mmCSoeOu0K YW_`5ܘʄ2Z?l*9׳Kk8 v^s|evה5ˇ**уVʐDzX(vh8(;ȪD[{݋քa:˼ު¾KKF:qs&h^;EJ"DW`mZp0 j6Y>_Om. Tqg["Od9GWG#$J.Z# 20Tٗjb*qb`-\u s%"CC`\5IZ(ڲ92nb%=LGzj+:sTO!K>Wt]r7}oG-:J$D+VFxZ[u ~ $R4-(LS-]$jVuwL>; *Ji[_F\ aA ex J{ o|HQWE0Zb A:aGhs7 `YP-uo-y"Lqb LjK9{gK7wO+fc7VP)y'c y",%OtX6FߙV |Pf 7zɛ`mDY,9@o]+&Es4.HRdٲ;B_ITҋIWVW6R0Էk!{ބ9}<-'RJu*ƕs$ymXcv[7[*(<XC"܅R, ꒛V +EhN=A?q+%q#iQb)S2Ru6rm"6tx8vL4`rƁ$,N5tp2(dшcsbٟOghys?ebdi2}SJU?cbLM?G_ӔHKmi4}Yu゛B~20F̀FpLwQtPy^G6l͑ժgR,+b*_U/qu$9k/PkMqaو /(t>WsNд<^,d_\r.f_p5L7IxPח0$\@i#z)[r4d}ݟzB).C;Y3*yKSpq7A[sG@B,P,5w)9.<65Sn2Ex^?Goݹ`(!g&l'He2q}A@V4:m@#yBc^;w"vttHGVuqp,4t3D;W_(@u?jP&]kser̟?,gU;T [JAgulϚ:hwWw$>berւx&Aţ0p@13ޤuy.?ne`96kI>idUiLX:@g]>CyFlJMH"Db4N6k7 N{Bl8emєAԑMo4 K~r 6c/zW6:>C0R*\0=`-fKiPDz t8d rp stP[jniphuRbd\4VYbwU6~q2kL^,҅XP@Y~F ˨zDPY  AKf52+@7Pw`<̤)>TM^dAZɿ9\4a l?*zHI第 pP݌߹ܠE-ZPAc|ϵ.G`ѵ̰G~QnZ}XD^:R$"ϐ%noF?i _C:)m r6 4w^yNRtLpʼM;B0(@U:f[#7;8GA?豶~8m ̬n0[B' Ǹa2$KPˇB3ѩ;&mt<'hPWK 8`Auoyn7xtNo>&:9F+!.5XtZSNk6+e4۴OdBզ6|lxY1L<1]4hȧ'RAٮ'K^RG|Wٖuz ͖8箛<޼6USxFSןv/K gb8O![ED~[5ϐk$dv8DW6|( =4XƸ_6*Rj^7SGp-/k]eK]T#25ކt5(O, &LxA6qSF4/S[yƼ]OG*@Qx4lk&cRƄ$7'ufd^K} *xG1pďDv=7{ ]=_}''~wqCpEh8vಈW?dAd .ru`yP,QJG#Q`Yj@F'"Lw;G`ƫe5xj:9C88n}\ hl;L:)w?gՇo~3UѨ-H2O[1{>+lۧ*Qbxy.wL4@k*DFc.ሠ`p &4Z&ЖW# yf1lF,;i1PMm=)_QitPl, F0l>W990G 1%:RnE3MK'ԡ 좪PgI G=m5O/g?$dgq~JJ5Pf$'@jgڔ7w1 |˰3dpb(ȼW"kܼ l}+{:ԑhґ|X"遴qra`5N5#YfٜCk2zrpSU%*Wdceŏ^Xjp DNf) #)⸒F`q0Sg/ɝ=?&hMG+ldhZ'*cx ۅ6`p. 9n/;0)&@8fIyH-ϗa,t7Ȕ3X~Z)o9>2[[0up"vUJ}FGh'kbݛr?V$eZ5>X8!2nܮH|uX^ucWLeĮܣYjѬX0Inw:wz}l:얝WnLY5v>pLsQS1ǖ/|fs:tCh4z/"ț( 4tF._Uj{.uKfYWGxM9Z `tєPK)8 eFmjp|̋Xg.X/=~i}:ci@Y;̀Y~sW6>ISUp6+S.~X" qh,ک|l̫W?ɽIm UЇwan j'7-zW}ݬYbn}rS1.=Om3죖 &z~/a>dۦ{TomGd!ʆIcuˎiTt:4E/qz>XKΊhB$ g-AE:qب)*i^Jq@XS YAI Fվ5w.8jgUvT*=|FۍαûΦ8zutv,=Ѐu.?u^KũQh jRON:o&#sEsK2`zF1 <&K.82"$i{pU2,6-%oyߔKtɸwYu Y6n8;N;( h#sA^*sT{c4R摑V7khYGszSnT}a#$_sG'2*f R!Gi,̢۷A2@&ܮY׻!2+p@%C"K-0ŖiDi#(E%LiΩKTP11q^bN Nk (2dƒ*Je4'wtm74 tܖo'ȵ0 vc8a}zFw(V(#s14nAuJYtǝiqDQ>,x"tRh]@|@"?@ )}~ax\)uD\1.R5sw׋tݖJ 5AorωaMK0wU V1WH6Mhl,Y{1><;TnwQ{  Ts/XU4夜rHF૚U &Qd RTl+Ch }OLB,v8ク#;sO 鐤OkW"e/)njUKBiJ [`}SLNKdߣl.+:`Tq*1kq֊tnvp͚OpۄH˶E]~T[N[X,.zhЉͳ@h(L615ţLm,q +{#4hۖ^@I N P8ԴBvb6ĴήIE A!bX\ "O__+<"g}_C;l \C&.05>}T๠$J" =Dq 7 @|ٹ=vuUP~xuthO[mNqvc\% ,rZվfaZ=`ǁ%։3t<誷ƍc@3f&ZvBʧYϹ?"=b^Fg%$`sl1y9gM|EGۏػCz8RͻvaBL}Į@"ql~O3@|úm=RȦ#e_#5^K]I  -Xa&|g/V.Zu\0>.x0H@+ݽƄ)oRt臸M08)xi 7MTϮ#krXɖJ ةrx"Sz< 5ͷ`b=~i2tE ΧZBqF!1e,7X)(%G6u* m^Wkod+~{dXPr6ZQ k DO(s^k'(r[xмTm$9I!ŧcnq)}897]M nJ޵ѝ8`KdPpwv")fA?4. ԣc~0u, :tF pIb| W,R)'uZ4?CV!gr^f, 8+ݴKQ4U4-ޚ (ːc6["\M#Y?mѢy!MN! X8yыE8mRab2&{Zɢ8U<`yX[Su󣙉ې]T_"ֹ y'#dR?2e>D0.1F~ <|[!qA4\u@}R0ś{e17_tbP3GG](ʓhBQK,;*;K05 \;zm9%Pԯ~HG1 DzLhjmy3yܴ\$Xl@HKЛsK*"QS "jYjV΍D 'M=\,c }qi?%fPRjN̉;>HNkN)ͽ D;R\CaCk5 u><sTZtzƀ'Sr^lhtj;Fؠskm 7oz DZn&|ie'V<0e̪H`\*F<bsUT񶑲C#)k Nڬ!!.]8s#q-!a2hOXW$aޗmv=MWOY 60AP(`6W94"fΕqJ\חN* Lb I=`Ⱦ SQE]߿GV҄8kr4,&%2LzC4{KIfny*2p 4ALN̸FT#=U[VJrWp^=?\*bA<.tnf-g1]. };yo#Q17B*0eT l.}m ձ>'}̛v̿_]'lx\4Dp0[3 OF$I 7xvhmzGI5)Fnv$]E.qwȴXPI [$cY!cZl~a9͖1.x]{3QN Z%ē&QIx+kz- jbZw]C?!_Oӏߎ~ET0| A ۛI'|7C%<.. Vx#aGl ڇ(L]g VָTe0KAn`m)_ Z`vNNew}& F}8:I8 cw r-MJ˗IkvZ}7nWZ9|/-?esٜگk&|F(ThvtPw9֡nJg]7G,b7k*B+< 9q/0ҤNomM;}Nr2lC H*s{_,f{Hc> Cw]*څsTc;W= CR>Jx)҉"e\hk%E}=/]fZv8VFHTz m Fy~C琟Lpl D㦅<>Wɏ% 9ԯwc^($Kttza%|V[B˽kjJI*k;p5l+38pٙ][0&ӏe5 bJK49*fz4Cb+  _ %`xl#8(eʸ2Nn5 &;8 ̹O7Lx-Q[yy? ;Y #$r&F]wYf=o .ⳭcXH B+yVIgk<O=&'U')e܆unBcnY7N'-,O+oN3)j-ATӍr05Q{7C7au2S%<>v:ptO!_y~6aEC*~t des_6F=#B r8rHCB;+I6>U;b#Rܧ̢#k V٤lD; BPl'-ѯ|"k# bb@9 ʋVd)4Uefq-}eNn7j>`۸W VUhS8->ξ#| VK$bTeElTAyL/h fc4`P G} os[Цs 9 b ^_%9k[ Zc4[001 CXǮ 4Z[Aw- %`t ]SH =5ff [IB\ )f-%P:uނ] s+&)'/!ל>]DTSjN5"{_0r $Zd֓/W5-%{F݄*&vFFCآy4N]f"sʞ=) KXfc3u9hEXTIo13q`6_ r nf! J kr#0~s{,!FGl`swo2dp.`sx}ݝ|J*m8=#sCnYQ-@FNd-B_RJM-ڗbȩ͖' Sjp{A d,[5UH)|ׇP FR2;+~Ra)h5Gqx0򕑭-=?e3׮JڀfQP}6xHѼIv?镽fnfn.Y'ݠڤ2+MTBK*/|3>Ā |xn8Ye OZ=N`U1Dηx(_掼^&m` Χ6bVz3ηqMM)S~u/Y. R>b+ܛ+w\m=g us=&rL>jqXwEfɪ1L2Z=l'E?է~cY vT{-a]h[a1a(L6MGN 0> xjY.-}>ěL}VЅ܄~TK`27~/\CbOcTx:GB}{c^+ ?,/*1$\'_@ʗRG|uk?+ML*N<5e$*Ҭ (FyDs"կX[hsCzS'uc h HHyL-<ނEn--Ă2{*+P"^Œ ׃5c.:OipWQ~k*Sya5g"/!-!kxP)C!{6o+5C?$]1VڱjzˢU?%7Ʋȹ;ٽx@U͏ʶcV|ݻ0wԁ辷7:x >C7 뾹A,ҟm~1:r-&!Bs{S?-ejڈ33JzgpҒZwfIOu3ovlͭTbɱ]FV5q\|@ (`%YD͹I7ÙƟ+TAm @TH&@u'Լy}/Xef#rfJ0z^[S&-nߓ'|s^)wI]ߧ bɡ*NNY&CRYq~M }O֏A$ڡː"ؿ! YFUۘZY֨Qfz_ !,B|!G9i S?bR2NѰSB៶r#'aar寤77M53Yr'D(-";y;}>zO$ m L`ZRߎ@0ջpfW,fN.Z61;&/=.`\A w8YIDc\/8w7^%zDhI)δ޾k+)KH@a_*2I IX2̸AyazG j='sZ JrO$IW.ͧץps9~ 4H$j%.b$ֲǢ—\RȔY ,TKfHgQ7yy4[f0~g9F63ZiC] *]?"/hFf # 3F4%ȹ04kR\4OI҂IڴW¨sۚn[<6_mk2݂q߈V :<:t!*7ˤoDhm z(^X _["5ϙues?ɗ= Y4 3p>YΟSa27ݳĘ -!ҨM _[FJ>+DeQSNgLk\)Sc| =9L[:U~,S# (G>cvP0q8Ji('av~ѵ5o{ :W1+ǀӼD.SQ %Wgt*QK-ϊ- 68-yqDHy@BushiHǑ;”x|gqJH  6_:y] 2 %9}y-]=VGkDMtn.HE;s7(&ٕλc Z6RNgm IjufjR3vX$$ݺclx.v㟦P M$͉ՈG]*`Eqy$, ! bYuEv8}Liۥ޲}Eē%}vCnvCY}s+I^J8^l8&Z yjIlI5޹ۊ칉eb9.b ݽ?MGp_i#0!F=~Q})0$ #ě~N nN/ɺ8,pKϓ<Cc16$gM,~w͐ (.T>̶߳.I5Bci3Gm]oysx_NWenm/rdn9bљ7,@ ὚(S ix_葿eP;^Pj+ze&,&lUWA ;}:\{ r+aZFL?ǒ6hs))#/X/[tY1~, 2|"68G.HͰ4XMf'T3dUn(n>eK(UmB,a?\/9$YFzݜ7sz(jϤ(;u L5S݃ ݠ6bs fsm;_V niAR<^,sv~!Pbi5v0+r2{' h0~)ٖl&+K-9@ME^ ߀v}nm!)'~Wk i-M'Ⱥ\]* e]oB u~K!#izCeE>:]$&OU`Y?J A>Yմ׏>4'֓nb~`p_F U5$nGc=b<F,Z YoFF |'[K?!Ṯmxrթ[VQ0X+Nàc74& !-r_Q3XMҨ=MU^pnP;L +{4Hp$&kb4ijҰ1 :AX4u. ?or  2F;d 9sAT%֪cLD_/ؓNĔO9ADgJZx3 /hoo$<^J@c]\F x',yB梩؟Vs4|Ph\' @!QW` w?!AlP**.D]W,ҢgM>oE%C,C9v_)䯂f7[ aוּnFpsE1X> !*u,6@-!¹aGRtivA5FH@-CT@:P!Ñ]r ]d\i@㘮f2ZF{0#?>Xd ƺP:R46.OE|ܞxښm 3o\z(Bsp֦n<E7 I=k^Nϩ/: wU(ɂ'WVK8dR,Ɓ?X-$۝ P$eWFVAK#sߘ$ rGb;M1xr UivEԠQ<=X&N:zW#kKn[ݱ"AgV'7EvuvpE @#|Ζ{Zi> 2ER-Dd;g?`х>u>q s󢑮AwH!&9sM=0OAsI#²卸ZPFt:OX-h꼈^C2za(?0JDYW[*(e~pjEb8bor!v g-3Mgr^ 5AdsL zmFSG;U:MDtD^ȧogP_] -f~W#^ov4y;ofR/ʀS<& zσ|"r|5b SfU _ݾ5`eEcDIǤ&ER[o6^m;K') S e?JM#'pk%I(˖ҡ>k^WV'KH=?5Igevh u:8X2JV52KIgMN![m\j^xd?,ڕln]( ״[s% a׈rtFTXRoeOѷPc-`C+D筜uVx?YsEٍR0b}xF(C$qݸ;-a|4+>ߵ#N>?IM4_>T[g bD#D`T%PfV.{ǐN' kݽHzpXZaSh|?iB۟}8<ɖs+8Lpt9Pygƺݾ4Vz  &2zTȎlZytHPS pSk݀\@,zcYX*7SjqRm8yd*D70?`7&7]l s>u## 过 |2^n,uL Z˶|p8pʰ7~g̠Jf`\Gdkg>=S({5!P+AUNj@<2<|WsHǵlC\<>⋵'G}0 G[ !H0:m^mßψEOJV; sBwP97" 8XOW^|a$KMn;< $Aз:D!_%K?lo:enW|WZ[ԏߑ Oo2=Y(>0Kf݋=!d}h6VGq ΡSaoWaQ6/17 go35C; 9 x`6IAp^?uڴ=X"g2M @Gʏ4KVT!äA~(ZWÖ!kl`2몹'2"Cɣl 4{S\eyclڊgL4neK-SF!t)aqܢv2=!RUh?O}gVZS'8Dta 7[–BJpNM?oÁ2rxȁw)$Ew[#K ݖCGhòϋX}>8O9;.[$,-],Lt;zX1${ޏ\K- >IP[qm_7%i orT^y`i@,Cwm0UMnYw5g=D&7ƒP13W0y~O ҧo"Ur>d_h_HDcWl{B~,% )D ƻns9BGa1έFp7ίgOx-i^4*m[Ke1b&dXܓ|TYP30T4"#DŽdr;dz%ͬ̈`]?fQ˰ӹ kEMk~BZ[L(Vr{6ftw/ b N0n5~q$`-v,ӂMK '|F~g^ڡ0<ٕy~=tE3TI:~kn٤VO֘>dx$:zg.&gHA5IAj ڏL֋ '>0v"mwpoEn?5X-S/UYU,nĽ7_ U)%`GV+`or( +lzȞqʤ3 β,#úN10L'.g9ʅfCCs7d[%ASsUeR^ayD53%]Z2 9ZwI84yQ8xx"_n7쐢.T/h'EގZjWW!t62bs"[<.r+\")mWu '"Hj>\q7I^m;iPNåDΊ5p]KVv#z7󢇥m[Qxަo}M[H|%e[oJ|^kE I#o9Ϛo@9/W0~X47Ua d$ȽϰQbG&>_h >1ӯ_QxjFgG~uDn'URBKwʈ_|hGdpU@V󃗍lșsG$.*J OpI Z22bj:mU6?wa g(h"v^ޑTS4CVffsɔ4@@ťH:Covʋ{"8E=З+"SYإG)[-mg ~!\e?$K3vzxrCWYh )8y]hi Qn7YMVǶMc5գ' m@s$Sg/\I邩ҵO@qQp͜7(0A1Չ^VNX؇ÛS[xnB2/o3vƀȪBeoz~FI>^j҆l R_z! v^>%KepuEuojд;N:fz;oCDz]V5Yp f<);q1s*D"Xy}K,B9FE<<J]d!7]4` b0)ğ ANJB ͓ SeMMNY*E} D}Qn0-h6TM{^Ԯt %7QM,ƻj"0n$r [H3:*4{Pm{VѹNXK/k#*YTͽWU@z]Lo-R-&)h SyK>L豕<- mE[1m7Y4gb%&doPFwLXk}xW٩]܏,IF,,{ː|&:nEQ#j~az!7t5;]qT-\褉Ǔbb VG:7i^I5o[Ho;ObU"3f8.eGGHgT;[Cw|SʞmKصc /Z- 0;@%Nh"TBAQsR8wc ' orʑqY F _B:u6ZZ]3jtz=s!4f{2kk]Mg" ?SӐyg̮۹/xNuԻm8*Aja!^4~im7RRw5ʫIZF|CFG -LR+VPU} M4ZYT(7cX̄# &l<˹>N?iׇsic#Dj:}NYyIL8W[G Ö3aPs_]N.S"ƉAyF!OV0WRPxmd4DfdSA^(Ρxy[U@ՍU$ D'Fh,AĠv/3"lH3;=v^U5.c\]VM5Ό] B0 f9q"ٞ#!s(g{$s]:A9wJA"IząX\mPE/KZ$ J >:"7UyBO@ܔ6f/yĹy_yBcCf?6EP.߀R9嬅^61nb\?ɨBhZ.Te^*49)& ax_|Cmi^t` k$d> BVZ\?hEann 4&Aɏ)v H\&fDY]=xy%atVud HA"I3Üp;;Z5 Sxbpo?@["fm!"Yci!&uMX8w)w#-0xqt7޿+YsʖΟ/ۧEX&7ʗNLe^u] JXWz u7ƐG}i%r.S0(!o.^ S$9 1!w4@zQ**?S\ժnx^ɋגQ0uA\2Mx`WNE</E+@DI-6Q D&ZY,OHl4gXrqUC7z(kY]Čsj 1jcj7\%S 68 iMV ^GH9[F6u!Jvג. uG,rNFۍ;`'LTs[8bZ{Ҝ=]l=YӤ1ۋ? $CuAߛG hD0ka0{dU/I R^h$%rJ+~zzFVts"NۅwklKmUU1Q]d=UvJہIH,Ȉp+y[\Qs~T-G-oc"4:~#*Ieav ˈܽ^#A6;Nۖzգ'C]|.ͫ;XZu-h9Ƥs{cѳ5&PY 7y| C* lPi)KNٖ H@K3n@a/*&zT<xivWx NEo7XGʄ$B >L{g%}6Fp>c˖Zu:E8)Qfg}X Cvfq:v* XѠo9p*kTe68pFڵG^D86 P{SGr87q<Fф SG"޴X~u#!g{N㔍UAz>\{4bw^^'w'V*Vpz-Mɍՠ]+\N7}P\(T.:}[mDuCV6'vX̤vMk!㸖7D qXv7j,Nf,N4C!kU*&Fwuƺl>KFo @:{ Ԛ{Wm\N߸lP=C6xnBw0[B8ZLQJ: ؛3_~Vn~;j/C08K 0}1qhl^3h5`{bJ-UPr"E E~RTK NBD)7? n\x@ݼWb߶ec;Q۴#ZAyn~7%xM֦{eM^UGܱP]ob,@wRi-eb:})Lrp_ {'@L >}% Hm%2ѣIf~7WÒhFGuǛ+lӑ&"}GlNcmfនq2u^-x5 *.š/evst=ZT NL[ P9wy:ЩO7cl,nb7 BʌO y&nYVG9WpqR%3s mezH݂ij(kH͛~VɊ45oM@Tx9i j ɿXRZh4 hh$3m~5y9ԡz̘''',kxIE!T{Tv|B#\ m23w"gs*9\?HU n 7E= 7޳m9FSqJ)"Չ@JU_V XNwd';(ʃHe~6(Jsd!s)&j$ړ=_Efɩw-56|prn<9$$c>a{EՐF qM3m& ?LvrqKg\|hJfR;YDKt) 4˞rBnAW QH OqjQURӶI+g]_P20,*=_`WCc:,5Hgyyx.JL>`]TDQүF/FםɃru6dp&:CYM\5-^S e6'NǯOěPw^M }Wqzy./5}ыS'DEP"!vh~MZL5HoltCYU; +rL}QuG9+.ubZ*v-[zl:P bNE0Mi/D b;2S7b&ic6{U\ Jz$>cڻ jD_7 FF`9KM;"iZ?WħNO%p'ګ4Uu|5Zj%o koT' mRm#z6Osp*c\Ɣd/)Q s)<p& SS^A '-p2's8{,) 'e7x]&\1d څ4UL2r(f)O CZyJE⢾.+_ # LE }\VIZx UD#.CH;(F]+,Ds#o1KS0zcğCYW5-zTJ\m)UٱR2BK{9xގ)=4fq C1!Z p9EPÅM0~3ru'dT?_Lk.Ӕ\l#2=vP ^8ǞGF^|_{a"yi x{ "~rXR+NO9I\B4ׁӜ]m |7*Y;BM5^I*1vf둶< dƥ#qœ#ءJ|*@.(Xׁ[l{nbZSl߁EE=7 [A~кS}'YN|պB %3m5^‹3=z`2?vD5ppы$B孼fl p^ ]ŷ6j9U?vajwCz?uȯ٧zY^p9jHl,! N %kZbGsz hmGl]^Fsivt,̿i*g ?PҬcQO%AR5^^ạpvԍ`1 u!׊\S-͊5p;YXslĺ]pSµTzG@b4_ER3oipQ%o(ksDFhE #͈_n>wopoh{DdN$vN-MT.IW+۵+ƵJ)NuZwnq*xgUljl%@Ib$9V] ڹOs)i.5Tp敡E_H6 pCkLYh؂4BGq24C|_:fHf$5MC/X{ti0E\\x\=>I+>5= O8R>fob2i^.eL~ApYg |XM;oƥ,-ɦBUy竤Q:Cџu,P{4}؆jnAu"PIY|!i:5wj[9n@Rcf݂B1VqQ+ZDtVru7i7IѝB!PcTbF?.,?UCr>*a6IoŁ'9C'pC o ˖ Ի%zHTH@N\j}q|Ft޲r)bd9vȜgsWLu.7.&>sKJؿ)k5:G=:<p*K7tҢ5_e;|@CR^Gܩ |Td$<`Ln 6QU}Mv5<;Z4d2WֿBǪgB^}q$$1;*H=0`hI?^y,dz^I8>[Ly_#.IާM``к<]TB?6얿a7Z H ϡ0d1t! Su"J(km8UyZW$A]ϕCZֳNI{?hP7ڶx^0cA}ZC^Uf c+6ZHh>%y/}g/̷)e^cNcLw eXG[u! \INiq׮g\yV;oID*}O. 7[Cv-U1Š^n5ǐh-Dx5u6"^"?A_IjOyfRܡlt%yGv|pMf31g=VS{+=_26#Yˀn;|N&;},Hj])䍮sm+ *ٰt:(U;-&@~Є}zRb54gy O3\Е;l[] hN8aa %1_L}u?sFGCszhdT*p4!x;֢ڡforKF51mlP}FIu{nL():ފ.O3lN,mW2[ݹ/8egRoRA.V4PT( $#0PA_` .[s?=$U]ٜBHqw^w&TQ8"S`f?5QNMP4n1j| )툁)IL3w'EƤ-i6;KR#Elo/NP41㗪2VvìݬF[N/=D/3*X0^k@=M%XÖyIW>G#"N&QAo, # Ia8KaP.D;L8 alDgDHӏz EYx,Ϳd '-|ʢ Ku,|C4X;rD$%Tx_>g :pCyh)tƒ߬vUk;amD:+@pM)"KgDsQ774Q*b軔:'QՋŊTn SIF.JMfU7|eR!ۡp֔@mކs`~|?2U@iXx*%a |8>فt+DDx d[a^1QsV.T1ecK1 1t&8% KS$m ln" m=ymx3U涅f\33A֢,e-x+J$^t,0KQ,)<ͬ|:F}EcȠ)uy>N+w[*ƅ~bQk֯J D1 $g2O?:| .:ϬOe PW޵Cfs4&]bx@]RZuL dEy믶vb:tie*2 k+$#R?9tMK&;OR10Rݡ r9O` G,x.WCse}&f%jN~כ=OV{GJH) [;Նw蔲!-OCt^AP3QC@oh:1s@OTE#Ea#ﲇ2mkVM̂`JgW@iG[${J3'*TX"i`fvUhx~W(QA:X1d$>FWxy  vۨ9{ż "5GZzf Z\QDgfw p<kߨg!N2zGm Ob#u*R+/&-ܧ6Q9${''nyrxG BUBhGHG0%RSlH 0~rI#j>S25B^&OC76daY=PS64`_YQ(횟F8UjOtK{~>vxb$C[=5j1 ^=΋ZmY𛋵OswǞaC,gD83D:g ɻh%ҁ*(jRl<j?W69 #7A g{eq (* z,Zc`Y}rFn0i`7n[}۬%{)V[דc{Y淲X"<*:?2biGhm#4e?B4A#, ۉX{Π1gxsM0tVS59C@ZU߂_\H33з^h[}\ 6m$(lHNi ڙ4rl]m`d)$^FR7eӿaS\ȄTy=nQ V`w_hKZAWD*JvR\`I"'3 yʇk7;2)%z~>C.Is`dCJHy%󿣟<~2"TB*6YF a£L#ѝ BUfE$.~&Bg|yOQs_=v5.L3+5'XDl]rv#xwU$-Ig>dso(RWURmAby!8?uG98vd5iԆD%m k¥8o1A ?E /t 0⧗1"u{t,$[DHʆxn&eq UBҎ[ z̦ߔs i\'94㵴b/=3S#cm s)AxR&xlfxslw)X֗'T v\ͰCqNGoD*_I4N,=#_֎|%U|)AP"nXi_I:!0LD?ՓLBiZz>LKINۦA1%Ibvo{yJ@l?= 1Л.mg{ƞOY#Eb|ǫg,uh\6}d.Nܫs72qd S?3ڶϮ}nd 2Nl{x~~Q/݄;Yܸ h:i]c>VetnUɓ }5iBN!nI*Li[}WX3:BJ^0kOw5m~W$WaF=fR$ Qk%>tcxy^<ǔ-ʢVaHk#"\ŰdО2*nN5@.?]F,7~!\u@{ N7=éx2*4iͅPg$|:)d6kn&^B]gieiXv1O&KOלV)@bkVUQ-u:p[32z{HoV#IC2:g&3rxY' tR;e&)nVGrETi2q$'rncl8U|jtn,!m~:R6x$yK /+Tʢ}i|ǣR75JPF*ZޘUa-k֤ذl\!M겤a7ԝJTvAN^)'!`& o?wpXN_S:ޯ7$Vuݕ|P\z雲|WcѨP3f`L $Ӓv@hFXY:ٟ -sIq.^`dvRHe0]'1]U8ͮ$*"sOjXX$Uh nR[ensĹfw1|Yr{JWjA9!il^,ފKW#RT`l=*: mc;H$"Tx[;|pӀz,]ͧXpE1NjV6Kwd& 9-Gq2mTJl-"r#\Jf=99qj4an:'|TPHZjAb74qu+veNEǫŷ|ђМȺUJ?p N='ᕏ~p\ 29 oaG#<6ᔅkgk+hYr=<퍴TgyX]]K,>O7,9?{vl\Q*X;mԙt_l ҧ]"h P" ,2KE&a7KR6ng]#2 #wj8N` 4EA#g}KVᅘQaH0sFv ex̆'lAO/;^zOһ)׺Moۍ@S(b&-0\ՏAJșx)ES57ci)J!Vجh/I#s Yo4zojuw:l|w' ,fg\d'a%](-ݵY}{os.d?{ibZj=)BΤl71 k1gVl9S/DHER`SR?0[CYCnq\pYV˒<)Hy)Ca3>[iv ` natOb MimDGЧջVMߢ=H bI[,kUZT3`;m_`t;Pzb۝$^`A\!!aM)nq$S9 L]X:\"`ן:YތՑlL)30=27TVxJےCvTt!.W`n7tw yY5I$vpxl(O{5M[x0eݾ鮕n;vad~"yBWI5A~)-լl<7*ARsT/v娶 z KZ @TMM[3FA~|K m0XOV|iN‘/UFͪG+d`uJjL ѷ Ma)uTM̒A.7{JA\hLSč HmÔPH**&۹,d%:.#C>F}I\H/ L2?0yUJ$)88ޫ(f<ŝzbO3qQƝ51>e6m4sC3vaRLd$o,tL9h"K.-jL++kga5E xfK4y Im3X Mǎ5p@ȪH豟og+n'A.S4IGoɇ4Ysn!ITx^r9!=DH0,5Oѧ|lYZs[7hpjͰ~tlhmtaNHxxAHzxȞ+]ZR ݢ}@cM)X%]%?81 mXgP_W_2>>T=6#}XBz P jtu0q`W'9K(Oو؟!&h]Eov19wlߝ)=E¦_NYSq }jdES6vnVezLf]"fP͙ kF|N$9"Y23!ΤH!L?GP= lF rnL=YQ%ZX: )E9`.lD?d".( |6"z*.Zqu^QEh#E]^o̪ūIGf fVf8>ڱ7*b ӽ?`  r8Q%]څ3@ tExhv9xo&&GA2(~F8>[eZLSƷ&$x3C(U<@ԈlP U5!eAoa_bp[-L]pM LR9dk2HoZ-6PY*aY %]Rak#>ж^h Q\bFpR̸Vʬ|xvee~ߞԑfrDDhKnA` ?O M95|.)Q bޗsa% >~-`]XaX-w40䕤z?[bXjBsK&&~[of>ѥ2N \ ]>RF+G =8X:9XM RˉLk~S,w`hd`}g} 2GYXsoKQp@iL0IX+7Y{VH,Heplwͷ{ܮ0]0fj¡YK麘Ļ:]l$qɴi#IVv^pGhnX|;3hI_|8Er<Ad|hb^+O{.Ui^<3'G~Π{*zMjO wdx5 w!ƛuw(ÏAHvTe/jLBcJ:؆17^9ZQLJdKax'b2g249%"SFaB8nx_EAPАqPs(;OG6_ %u-<_] ?.Gy&=[ЌѺMYi} #wpvֺ[ h "} &񈱪Ԕıs05v@vՂa/v5ӑqcR~fl˱Y.Qpgx WJ<&)_xk(\Z<~L]W;Fu)%jyN^/ǂz)yCCs ZpK;߽G%^c;9GvǛVⴧ#MZ˪^_OBUMNVcJ]V>X"I)$hܝ 쿇ؼ;OyAG0i^Q_#RXb;E|mg0`N7*Gv/`$-Yݡ` lTJIɁO0qAx[ZIi3MV>*x8a\-8ʢ j`!Hi_`-Q"8-N|M`+ hyIv T#<;;~'lw'p_33U.W8*\o@P[Xu}aǰȍr*_^6h~-MH3xs`(柣8G#&TI"!ZTƟPnw†¶?"#Z69IXfCY H$ |{ukl'RǤ 3zyJCW!UߜEi`Ah%݌fIPvO~TGUL:_;C0EC$g] ;ėKԙ~~_ȃUF`,@,9)1usMfJ؞jTj;_؉*{V0G+٧m"x 嫱 鐘ұJT3[?Aq'! ! y"aL]I$ gR?vEЮCa4I{q6kb r$kXsWy.Ô:RF/pŁ^ЍB_Ҙ?nih%Y)ʋnDT)lg"z,KQv9qmGK QJ)tge4t#Kz#AGk̬,njnY2>ї8[$P.LK%ƻ\J瓂n澙bކr>(P!Z"Ȋھ:)l\-4i )-qKbeRQg~T(R^)΀*y ~L,1PTsgjpɬx>ymmi%DV+qсMtrfkJR-Vii@ -8$&} 1"_J Аs4*z"w}`IzҙrI p3{]#כK~o<:QtUg~X]*r.%,\*N 5Uc Xw[Ma|8Ž9rǰ3O_))g ^]@ 啊(T݋M"܅Zfe ^O/- sN%V>^!]D(Ӓ 1S4n;J{D lL_volW7T5Q*hŴ5% "oa&ډј%x6;ɥ(9֤ i`UkZz vK}Ջ~Sq D#\9C0Aؓo9·xPJ#6q8Ws0HwyoQ ק+Q ;چՑPE gk"k)\x(90[M< pu ur?( 5Z-\9|KxpcAp8G'OA\S9ޅoVKxXOމ~+x CZjqJP3'xHbr͞'"d lRG7e'1Wi1u89n؊>q7.mlܮq.۝qR5Ekvn:AM_ |gxlRݦ&ݜ#k7d. @~>x\ " W=%h]$xRmH cluLX|a^ h'wHKK#?7/8}M3pdS\+y [` hK*LQ{~ōo`J!C @czf`I΀i"V<#qHKTt^ ;Qi&x]Uqtjg4N.x>Mg43 8-{ǽ/\KvgK##q(/t gѰ1g'G)A%8 %S8_ʈ=~#S#>g&%ʧ{>R(hCśAi?=Rt8fJsf,*60=ZfFSϯ(ƢHRɂSg@\ ۵7CW8Lɉ /1,]E;u0a/{<);C7=ï7\ ͘T^?=)@C5Kla[ x+B壮m/ns58yxhg6i" 5ڔOfgh3)%˫.z*sQ|dqi4 |*\BE4גOmC8&+ɐM 1T4Y@iDA^j-_Qk׮AA.ah}T/qꁐ\K__i>4fmBx:>Kq/K}!#눴YŸ`5@\?ZV5'|?lnuv jW ȋ!xYc/hu^q:v7,"enC=M hBƽ?Wy+Pq(oiELwkt0Ddy._~om4IgL$ujuD G `@UrJxP$1pn:(qRP G٩s8k2~AiXRRy6‡h->9@L* od, (Ϩcg'r4D/Ly>f\a-E˾Ffٟl8QE;#L4y䮸LfBo @ʩS031 /H^߆fxZL<@W0Fד܋wF>+>-<۰tP+!B.оZTdf'"$!KOZz`"yIڐq `G|c1lމ$~.o԰,#O/3Icr9I 8f!LTѱ=/7$2K ^`-?ǕZ:CYK{Ӑ 9-4~ڝL74) ;֧Jҗ #O&C3++U*X \ZddJwQ 8.`gRL|1{\`B랼!cVoZBZ3hxdf2숊+cIއ@J)+w)Ic?WUZĹAv|A$K45QQsSDr C}pHg2VXnW;`(8ְU]f9gMl!Â^ǫO-[lg[BibB%} ^1&(K)Ԡ)6.\ c4CWJdo\{aN0mKX2.|c(Q4``wA `jS{! 5@P1y e@qF~ei]l5v ak0lH)۠RkL.Is, h<;de?''a{3؄ڣtI讎ΣK $i|TFMwqxcoro块"0H`#$i ً퀵j5'iіe"MؼI|W` #CPn"Sra/#^]b3U8 %҇ˮ,B㍂2btUcI)xz6`/wK,K2$ -H8ƻ9HS[Nue3am4xL!'z8iDGwژc(/r4%;Fo7RJ g~ZA\fKT3)/g>A T^mB;Vf-| 4r]еD'xUIC|0˖'jK V쨱? GWqRsW ?0y ِ 7(Ub=wy-T!R$%:Ԫʦ74m^<*D"T曦mb}?NS^_絘`w&FŠ.%fbk[Ylο# y灣'P*㑬/@ᨣG567Wyٽ+.F9HY)ule(!QYK8LjM'&Djfh3_K#΍6Kl_/n'8q 0F9 !퇏cP˭uor5 ?-k i uLs@gh}T9Q?zEPڕ6-<+_a^з, pV,.-Ih X1J:#BӭZH_C:^\{D'PyĖl3&4]}|r2~>QדTD^-TDI[8RG/Ju +oFfu+ -4X~) h olJ2n؎pVk c8$͍u.lۛJ^: C^}3\lO]b+MX%6Y>=@9w@& ]LPmYvťYCaP 68{"^n"=TB;tx 5+Tt[j>8fk\Ud`ťkbaՈN52խX ;࿆"@+fܶlC66l`W-#i(}}5UJe>w:ڗӕ4/@ !@b׈^Oz[zZsG}\;0KR3qцrwi퐳rss2ϙlW5yzM!|. 0v{ q.7ҎGsqHKRRqbf<&0@#鷎\DB@%8ϝ&Y4Uc 5fAYY]F Py9$lYոr^I'n;yp *uމ.6> MLk4bC9)Q BoĄD { 8Bg`5|< nNdpp++s#'tsJ>iLb7#lt?DZO?OC$CpG6Xez6hcxvWu8ÐLƫJ} &BQX?sh.F:ܶ l[iOQ ֟-l&fWޚqImObn5pBڧiR\>4AtD1lK:UC0k~6kB0 AU?n6f4ʽ_5U=ޢ"RBcƵDǎ۵omh4u=qF |wyl @0#;sHK2J-q\4d^ Vz {]8 0:[g"޷;s|:N$KvYT̈&j ^b2ICԔJBxȯ"Aҿ3$ s!iUh'Z6P/̦A[XmG=[JTi5 Vp qUuB w ׮iZ`=[F4(qXWTj1|C2t}İKŧɖn k>'g&-¦;@}=hJ)8aGTt{1XH)Bo^xljb )obHƏ @er5I(R a3w%DFEDI,B˜l^[3´ .D}B3i|y'N.Z/DYuJ>?~f_ZNnpɫz&qEeMӌ>~TӥYEcJ$su#Q¬ Qkݪr8d@)C u׏uSp3+d2D5~e2cËR5gp#rLE~~0:JvHnƇA $:Tz #sG0*,s'{8Was"(+a*S7 r 2~袓秜ro k+r #%no.?1f{MV>t cX|}c#-c/~"/T@a6& EKq ydik=׳dNU !R+[Š7W0f 0({{|8^Ϧi{'tRo3\;9H7 h҈*c푦.|{2NgVaN%Þ1%Tdp h.seI_Ԣ(,t%DBB"gQFo}yRiKYKK&0VX6g Kc4Vc阜W(HX8 jEŎ?jMbJG1 -Ecv],#^?2W䩭o@=؇EKEIF;4H˥zF]x?4`Lb+9Hf=-bx1b2(g(p6gx4(*>^ag2zP*/i2LLMy7O=yHU@V5GW^,n^8vT.7lo6;J FG-S{]SfODTсL,?ڈ3G j,d Kɪ uip׶vV~!. ]uPVQXG~s4OK'|by" ihPІ$$!HzH.yHhABJ tHID˿"v$m~}C#5^:bw Nhny,(!׭D`WnUy0aSKD;WDn*|JᔟW PIT|o\q*߉ VðF,o r9K8=ԇupYJ^1ʦ 33 {sWGx DE߸% E+%%pw&Όi֛؆5;Ŕ"wz Ecj_z!:Zd>Z9C{aTX[ou'&D^>o# D1W7%o Y֬ێ%9y% kr_mg$ZȆ>25 ~NWUi%?穸`R>tEZaһ 4攀f\EhY{p* diJn% p:2.w(PfRۙom;3otT@%{8Qe FE^DeM0K.Ŕ\l漫q;.&wq?g%JcaIO#*n*cZ"umyd=3չIzw|yu$.aǚ#rD9L^-:5Ojb9 ^*a Ob]`$dvǙXNY \Qc2uKlxSεLk^W'}W@6EIsڝaȑͤ[ʄpq6];ª6ʨfQ(^ 59\6ZD̉u?|"'xwiʼnW$Nv4OԖ S|4ZfR;MѕqYDs;:~yfJ(aȎ/ѳw&k|ON8=T[#K|yِp?j혱Xw-Xot pEQUԨX5FSOs-zWuR-$br4Aظ`E. @;#€;[2dt3ѳd.`͕4J $)c;n"6Ex}{qYfMuy_9raw5:TBu~dIH2H"6Mn,UL[ٮ xj:F`A5?u㰢w.@#.-U>1=K‘GtIA6>Y!\셳;Ԃ@@漹94%V0V&R&X?:K/ <[|Sga?־ذa3~ÙTk0wDIgɤ[>?Mr<8W_cgƯ1cج䵇 h4ck>"Sijj+:P\F}[ӞUx|?^`ҕ? 쿜gB[4=}gwIRlѕO7z}bٗ f?% 5] 1A 7'vjPp^x`ܜPXP |ђ~s<~ 5.ͽ)z*9@| h2Qd 5@8q/<ҭ[Õ[$H7BS1ʧA7mƲxBrOg~*osjG@NW'G[z^*m0' : ++P݈OsbEOANZg@rJM 8L|wd'f:V6 LBԬ)9 3Qg9R CCZ̗-4e;JcsTa )pũH*CPHvC@Y*DћLoAjn{^+#א"e |A 8?D.]C&؅'OO.QޗpRؓ7 8dAL5~F9g##]Ӎl@P8|YŝsTdoF :"憨|]3TƟL[gu0㦽8/)K˥h1])ΠtJtFdSe6wEw|/q}& ?W.HJs+OV |i[BPFj 4'f2ASg!/6Ըx[$ AM7+9hڀ C,vρT@ק2ktqFӌ{:ЯVI B;o2V8ËH=}WzW@rqHɍ5{m1xg Q:xF/iK;4hJ'}y1Lf a!ٮ0ـb+gDzg`%g4}KәI6~ɘΕ'#N1C*K7y]ieB;U^j^9Aާ6K6`*HLV?=85GF汊dDUų_x,N.3Z-CǛ6#}a%.noRMvYE]fv%`-ZF7Yz8Rv!q43"cC*]Γ~᠌8!?GmSbN_JcSZ{ ?l!#m5T@B!,FaiyvFqt=';!WNd{9"+ ߹dO g|ve "$}lo⹈t!qL314ob1f'_zhml6XD.[vd`eg-9j*fsaזu',pF7>q _<֍jD)+ã憮S5U C܆A`Kz!nj 8;dTŖ#(]~re➦ _P;?vw% i&&+x9j8aF%Ɨ W\S)Sf@,+09|oV~) ;<4N8;Xojۭu;i6f't.F^/)Gvt7`Hܴ\a o+DҠ-/M3NLjZW2pP ˹ςИ㘎B^KHz70aozTO 1.hr[kʰ4XaAՁ.#Ug#zC!sQ RyKe=[ DPeT+V =)aos![h$?N$ > G#(W2{] [i|iF 4~|B@Ȧ@ xH`2;-'D{߯VJ SCTjhp.v]iR&萏q}ҲvVP;XZpo6cr'K񉜵ڬH_yr1ays_]Zf$+`NsΊv*G؀flJ2Z+2@O)Zz FZRB'v`9(tjE$7BNBTs]L; Ҏ vb0p?P_Rt@*}23[ozOJWDXsXX޶1AZ1EU -G @mPh};{(S?%L"ضDa)xl Q{<шL\LՌ/QdTL׺F]r!lj"g-2%^I L#Gv*fˋd9onu,4{8s0O4m s |JT,|&4T|sD cѿҭ0C0Y?^>'%$]$eP3Me@g[5YK+,)b1xxo2At>,)P_*O_s՝p12yH:tqD8y1v(9[Gs=8&t= ~N$>0!=)!B)FȂ8/0~LW 毹4R3i/ | Քy:< )*?D2SQ;SDZ#!]s{ĜZF6@h!آ<\#@Ѧfv)DڸfVhPҷHɎmIr]'(|Q۽ĩQ@O0 XUat!}n x}//Y};-a{&E0}stLvRFdv* 0CLK'0AwO j@;bM)NŜ̆bG%߉qscZ)̢'}u7bsPudks ;tQ,ZD*@>Ł*%Y X] oM/Q3i =/nvq`۬#gTLe β6x|E*s!򐳊obDmbIJ)8eGڡF0Ň; -פjq׎QԲ^f2YfR)FVrx-0Fml IvLTZ.Fs׾)!L9rZ܊_l/Gcl9 uX~-lr _}{uɒʻÜNQ*S'ݻ x޵M\g4@#v@˄CTԏvcvIi +Q )}>YC ?&7 R&Fjɋi퇑VC=`G!޿)omqr)_ +ĶfR:qP-oi$]Jf*sBؤ^$P }qv]qӰݹs#yj5N&K٬⡘ި4蛭9zAF)bLwb;ʺ㢧3i3wUՐ}B Ɲȫ_k~=K?y[)Am>.mw_fofgvrlRVtDg k4^.eJ-=a\fV4QhqT H.ZJвp',5\Ia5P eC1W:E$go4YS4EMS2 -9`>m%`\aî^\9~9('2q#tľ_3&!w HeaFUE>ЩLmNb({TSbk <>>y|=u)exaZϒVH f 8pJ]xFxDA^jׄ.Y3ՍG3b9Wt$拋bp)I?L7:g{W>o ӻ*hږLgI_EYVLeR!NTkYhyPLeF6t{`s{˙i7Xk.Rג=5ܨ3!E R8&~(YםdE#H^䤀WEK'S-GtO{m#|(xj,)c7Mj~d26yb%$vfugT$R!V48P03)l5x:eBlv1N_6zCf 3wLڪ6gNtYjd\\^r-ܶPaGL@T9ԫ~634Hk ~X륂ImG[*[7\c[]vA5-:ZOb'J?ާԧnyf$Lg \TɬF.KntQFf=m(^N3< *M)D%Q$ :ee+sߕՉ`kdB|k,_DLF_&K;Q{-ɱWT9OJ&LNT j5l"aʮ.~ >PB`>$BWȆ(⩔< T 9fבG}nBy'!Z@oՈ 4# ET0dQt=ULI{VkkJ s? uh:zezEǝUjNΥe6r|]PzL0]]BTڄZ-U%/ d8ySᎪn\F2 Nt !VF/[Q%?4ǵ[s^`NDWma+R=5]nm!ao#p$+$jp Y!5֮kX D%l ԓV-TqS8-ʙx?yBp[ҟ3tQbJ+0t@C?pEKc*0z,'43+$OjĎ /g4o4}B\C}f`|@9ɑLK,t"z,_^3^Ṛ=Ytfru΁!jl$G]0> Iv(RE6i -Aq 2GL8B\??m6ϤCsR嘙`޹0 LmX:EqqZny%gkgqH 98 =}諔#P/@C}h4'\pa>;4H٭oNHByT+փ'@{! 2-.LQ[{*}9ksO!g / NKK0b<§[ѵx@;]OR\Q\Wef͑,i]lS#fUW2.EnW{1{\X$N!Dxh ̰͉Mf "@$DFd8le06_`p{}jFRG+wh!\niڜ ʼq:"-YiY\2ԓ @T圆-IO9Z3ԽKQCكȗt瓕+!&K,%H u )HS-{Y%B ~p  <}rU5E,%}p?\`*6.8/ }o>Sf<`1E7=)>IɂA?2Ex) ٜ:cCۘƨ^C2<޳;ߴQ+F|XNEb辄w Yh>6r[iJývBiIoܥtF"¤G.2>Cy~#3RhWZVC8:tQk~`D: = &:'9RSFG 'I UV-j U)NLf:?ڃ7&߰, 2ڙm_Н@v [%ˮ #|VaPb6'Xz!^3PŴ%NeN. %Aq$=t珠/ذdVMh;,h*S][ dWnӫc~؅Zf&p :ZՄsބoͯlt99 &tO|غ.p,4߮䜞z1=iT>R8`뵊aߨ3c Iw#aAC[LZ4׌>)bKwkE+[Q~g!DR Ըl_N7;: _1**E& * =WC'DRlr-,8miEVn*[J8./H3EI|lL1kzn3 Ђ}DK0#dsQ&m2Z'Y!c YMsκq ;oRO8ռ!M̠ %ypnkpcXs*&dLb'ci%E06%K:Gɽ=R.GW3}=~{G W$fa[@wLJ,¯ShG,k >g~Εo3\/tʈ3f4pC *2ᰲ[}T@fCe T6^V#5*#dYS:_v좽1kiR%A6'/t9}+Vkuv*D#yV>(*hDM+cj8@PU^M2HgV#~S̘]Q(;.MD c=0OZr6+7[ܲ[H9+UbVz52(@tك p铟Z=uçWrǀ$p-^յ99.@a&c|{h~Hb@2 LIl1>YnEʑWŞb+䵱)Ѣ^bƿI*.ֈ+:H.8أ)I="iո%e)ՙRtE Z~߶ŸRH"+. A%kXEگp M ZC 1:"Es輬'C#r8d^&*|>y۩ #|S *T9/tFjkwxq9!4(# U f*&NNFNJ>ug? sۥoMӺ5Ng"kuk][NJz ]j~e6maSOxvB5h )Q.m %z_ %vD5XTܚ gʱR0[4AM6,StԒsFgx~ /D8{9ytCG⼺`^=Q_9}m%ѦMV P@ TAHs hT$ e湉G\J )Q@bٚ?XlTY&r1f}~gҊq|3 zCKfW?b"ʆXUN#/<7pq/9SdKr~ $itץ?K|Ʊ?(*zўN`H1 ǂcHu$Ng߳nzg!PN%q"97DR;# |vB⿳<ˆu .^%?7g-^}= >zAE M""|k~[CdܨyaL#'*_ޠ~zj,G @dy}[v#뾕ؘ0:5D\ ;"C7|1 {⦼*SԜa[LmHz2xŜéMqX= I nD ZonYM0ô 2ܒƎҋ|#0ۅfQLJtZy'S~fNt3HM* W:%3Mrmj^Y>< e@Ҝwhku/o$]q>frrӎԿr`BC]`=8k#EӰl#S8#m (N6Xd^zCp0 (L3qQeV@2ę}ir -Uwn=}Dj"N|D,`o6nP n^3C*M4RIm-oq׮OIW蟘 oSnf}Qi%rNX>bσnMO vҷhWw~ЅBjS]^T޺J'x3VO"$ÀmQ%Uѫ3r>5w&pNOqδCvU7yM|K/\ʞ$S95]f)y Iڝ,i;H`R ^ @ۃS]a ^5 2T[8HF2 $ 3uԵ2l$4-9*KɃ+=I`&q;agU˴h:/ -11ؙ!-bIf%Nr2 V2S$cy(BZԦ5om$,oR\GWʋJ- 83&YSsOGS3yIi[˵Hw7Btzz7˜"De~ZHK[e83^RC3yɶ8*#KxB%b{c 'EMl g"rhrRڼ#+A'_q=7%8s}O5%I`1X.=`#Մ5ȼR$l& lh"I/kh#t3jˡZ"lu6A赉Wv)H~2SDC*t^G*A׷FI ,fO_$^uXZ|܃!t LֹE7uTd0⹍,tRC&wi#Uqۙff$(߰/IR LeX1}hQmbCC|BPϓLCI\MJtwޅqҳ`BLy qfNЬ[dژcRc :2JpQV0 <}&B8:weí|@ ARtUyGHB0[V!&>29, ="vOB؋ k3aD7fIe R@Gy ԧ~cvYy8eLH2EskOQKê(׀@YUxʯ[$[5ȵK^lP6tzSCs i<4 ـ߱[ l`4 HOT"ⱗl̓@t9RAvR>`֔c6{qHfQH˭k;۝݅?)uپhhoû/_pۀJ^I aK`P@< I׏tIϛ B)|~CK"Pf'bͩ`"\̼nC4~vdz-NA\ӺߟEhgs]f-B1>abMh). oCi_^ Y+ q&_jZa]]R4ղB*pسM 8tDE1o\`ddTvMYrHvKvnx;|\\^&"|2,AΒVV|[0QE◨K'{JEsgA)BcoXTܚֱ8\X<su=5j&@ YAx6;]@B](JDXc}] ι^DT2'z iURztͪC^Uɛ! AKMD?DYh5qSO(xϺ4}m3SH7kf +T.J?=OQ:G7shY+al_\v[1靏#$uJg@֯c[Hcc )r=.`f+ώՌfDg} UR934\oI@z+xbd}vW4P*mu/Xh8=zI"Ŝ|I|eVJSyvX.B"؄%ηMm Qu !O1iCGžuȩTJNCoRzpZ}Pe/Z Q'뵴~ȗ_Tnf]V f8ڭ!Vt^tJ\ʽx+L$Ξ+hmSP X '&_?kneR6àљ'u&V `B0apiwzm٨--jq7=ncWv[ uh[2&*+"8 "lag7.eņo`lOoLf;34Rag*HVVuI%6ӖaNsQO34-|pF-"Qq8bxf͔F^mxЍyHTyQhNmR#:ogᅄVT2hilɄZ%,z'jTc'+85+}*UWO@ TO%֓Q*$c#ѯ3Cdpl "P1X_mjxJӷ:Xez-lK,׺k'6XeAn4*n3OS6Yy2"td;Wh K;g_fUt{_v"&9nn atp"g*bdV bӭ.c4,a$Vfi_b(ԿNoc8(4 NYP"Ę%Ag2䃿@S؛q%v) 7Ʊʈhgu)G{ mkzh1_ٷK! B;(#OIW "5rjm+! $7R`$M"gb3_㙄|i+Ⱦ9Fm:o8?[‘.F 's'qU)^/"īHUλ3P hSbEyamEs)|d9}M7IH;: 9-E6;Sk|zW\dW?[.1"95gYr9鶤VWɎ6"rza\`)ҟ}" J%NIO?NQ~P  :5=~9W ;LWtq)UmJ̧"i\C] %56jk"UJp'EM$ܩnL踊A8b]wt1qվSoru]s HEDM/ S.dIC-s@b<>tc'@0tْYEc_Qɳ51Mqu?d`h`g[n )*.{]Ejk dۇG7m|Vѧp҂61N!]x2j<_T}Ir9KN40 d5sxK!ӊ[u!=:h<@_4BG{ER,smg0?)t>6D#2uϏmu4Wdx1zTCm*vzPN۠Znv$$6;>^JYZ-Č \ᮥ=qo|>xL(4ZF+h.BUEq*9,SBTDD2I0sIK2-uϊgֈe%0 r1w9 f*p޽X!G[F6$O_1ӋJnyþ=Q^hƞZk -,> YZ