sssd-dbus-1.15.2-5.fc24$>.sH[E(7[aJb>@߶?ߦd   : ! 0Dago D  X  l        B t 88 8( 8 90:D>؃?؋@ؓG؜ H I XY\ ]H ^ bdeflt u, vTwތ x޴ y0ߜߠCsssd-dbus1.15.25.fc24The D-Bus responder of the SSSDProvides the D-Bus responder of the SSSD, called the InfoPipe, that allows the information from the SSSD to be transmitted over the system bus.Y.buildvm-armv7-04.arm.fedoraproject.orgFedora ProjectFedora ProjectGPLv3+Fedora ProjectApplications/Systemhttps://pagure.io/SSSD/sssd/linuxarmv7hl if [ $1 -eq 1 ] ; then # Initial installation systemctl --no-reload preset sssd-ifp.service >/dev/null 2>&1 || : fi if [ $1 -eq 0 ] ; then # Package removal, not upgrade systemctl --no-reload disable --now sssd-ifp.service > /dev/null 2>&1 || : fi if [ $1 -ge 1 ] ; then # Package upgrade, not uninstall systemctl try-restart sssd-ifp.service >/dev/null 2>&1 || : fiQK5 큤A큤Y.0Y.:Y.fY.0Y.{XqY.Y.Y.Y.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-1.15.2-5.fc24.src.rpmsssd-dbussssd-dbus(armv7hl-32) @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @/bin/sh/bin/sh/bin/shld-linux-armhf.so.3ld-linux-armhf.so.3(GLIBC_2.4)libbasicobjects.so.0libc.so.6libc.so.6(GLIBC_2.4)libcollection.so.4libdbus-1.so.3libdbus-1.so.3(LIBDBUS_1_3)libdhash.so.1libdhash.so.1(DHASH_0.4.3)libdl.so.2libgcc_s.so.1libgcc_s.so.1(GCC_3.5)libglib-2.0.so.0libini_config.so.5liblber-2.4.so.2libldap-2.4.so.2libldb.so.1libldb.so.1(LDB_0.9.10)libnspr4.solibnss3.solibnssutil3.solibpcre.so.1libplc4.solibplds4.solibpopt.so.0libpopt.so.0(LIBPOPT_0)libpthread.so.0libpthread.so.0(GLIBC_2.4)libref_array.so.1librt.so.1libselinux.so.1libsmime3.solibssl3.solibsss_cert.solibsss_child.solibsss_crypt.solibsss_debug.solibsss_util.solibsystemd.so.0libsystemd.so.0(LIBSYSTEMD_209)libtalloc.so.2libtalloc.so.2(TALLOC_2.0.2)libtdb.so.1libtdb.so.1(TDB_1.2.1)libtevent.so.0libtevent.so.0(TEVENT_0.9.9)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)sssd-common3.0.4-14.6.0-14.0-15.2-11.15.2-5.fc244.13.0.1Y.@Y@X-X~@XO@X6@XOXWW@WWW5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 1.15.2-5Lukas Slebodnik - 1.15.2-3Lukas Slebodnik - 1.15.2-2Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Lukas Slebodnik - 1.15.0-1Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Lukas Slebodnik - 1.13.3-4Lukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves upstream#3382 - SSSD should use memberOf, not originalMemberOf to evaluate group membership for HBAC rules- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Backport few upstrem fixes from master - Resolves: upstream#3297 Fix issue with IPA + SELinux in containers - Resolves: upstream#3360 Do not leak selinux context on clients destruction- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Additional upstream fixes- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code)/bin/sh/bin/sh/bin/sh cadeuk1.15.2-5.fc241.15.2-5.fc24 org.freedesktop.sssd.infopipe.confsssd-ifp.servicesssd_ifporg.freedesktop.sssd.infopipe.servicesssd-dbusCOPYINGsssd-ifp.5.gzsssd-ifp.5.gzsssd-ifp.5.gzsssd-ifp.5.gz/etc/dbus-1/system.d//usr/lib/systemd/system//usr/libexec/sssd//usr/share/dbus-1/system-services//usr/share/doc//usr/share/doc/sssd-dbus//usr/share/man/ca/man5//usr/share/man/de/man5//usr/share/man/man5//usr/share/man/uk/man5/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -march=armv7-a -mfpu=vfpv3-d16 -mfloat-abi=harddrpmxz2armv7hl-redhat-linux-gnueabiXML 1.0 document, ASCII textASCII textELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-armhf.so.3, for GNU/Linux 2.6.32, BuildID[sha1]=0c1eea50cda836a270bdb597cf461cbf0cfb13bc, strippeddirectorytroff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)0RR/R+RRRR RRR1R R-R)R!RRR RRRR RRRR"R.RR&R%R'R(R0R$R#RRRRRRR R R,R*RRRR5utf-8?7zXZ !#,]"k%j{}{&-򝍥ւ%߄,ƛ\Z3ȦRBm|1~S-tUuχBqdž\uGfɳ6gˆtr 08GP[6贀Way $p%'镌Pn=MxɄhp9%|ZB mSImwL_g0C8Uddb4Ynq.>:u(R._1XT?WNHN vᢾC+UWbdtP`ˏ²W1_ܝp.YP:inB;y΀Tfv%pفH"TO1*Ƃ[^, c0̹ &L}m(ם Ww="?*Hԧ Ip,>\\6.3 Qq|5ѷ-zؕHk'y 0P SnC&Ņi8_#1rL2$P}G!p{ LBP u0"_%O!_;\"Daz/f巽6#]ߢ{g,>%)čJh#VRUXFtB଩r7T|1dhE~hο8$atͽA$N-cS -U}4zJPE꾅NO€g ;NUS8Û Bˀ2鄃fAx0;ˌi)o(JY%N~qP3S.̡_Vg.C.= Zd6ToyՌ&}R:*3Nez `+AiPɷYDTq{Щօ&gUPWO/h%ޅ| F}1tF@(O#w]kU"9nt4≜ŚO*Mp֑e'k_[u@D)RO((!Ceq:F@[y>4Z^\OGW{{m>d'v@e^[O~~OuO{*A^>pHo]*G+_A@>Q:Ӱ# [0e%~=[]:R-Cl,*>H X5#r%MCߴjP{{1lkqςUGvUD␷t:/_OӶ &LS aQfhvΦ]xI3*R]jkFe &6 pS.+5 ETXUZz6Yӱt`=Lҳt4:AMa E;0W;|ҋ/HͽWCrU.U>|$za/|̴lBKI maThږ\4r[*W]K' M}3.ڐ9n?9=љ+/Y@Fkc및IqZ+gX δma0QAy/}Ϩ)F!w-e4tŹrut$@j=ٚCkф~`jg}el}`E{JUWqЄq-Ո&m&v$ +WZAye4&F=[ռ7dY2jf(0uC&{[= ]>7aL1^TjУJR,ó&zK+ >qd|lmt8Spd S$HKF1vjuKH(@fހDp4pw_^ r^{ P.‚RPRX֝c+D{G=5QHRR}i$+#BpCEPS%פ>ȸөȚWЭLoHYzn;҉3MU[9#9cEiDnCRpw}wMw`?`"^&$Ev( WUq>ުhbQ!J f;]5LG .::^ڙ8CzBa0mEJ6z3牪aj)6LsD&D~0N4EYF U3[ī}^RT1bPݝ7tA]kCAͧ wԶBuH|',aXN/t|*]~:C)&Pv~Gy2w:ٴ}" B/Vցj Gb"cl(gU-w|#-nh5LŁlv ;W'Ԃz،Q6}iԽyhxVIH q 5DJ>OF_aEF똉H|Ē{IKBL* &uEi+Y#˫xǨL25?8j>2FN#)ut6w !Ԇ̃8!3s;_,[lrg9@:H;T&f2>4܇1%] 9zƱq! /YԛJ?#:38 OGe^O㚯T!zS#^uW:Hav7+w[)j6y5zC1jH`C{&n}sr' Yj4fzQ=v-)4d9AУlY ``># D 5wW1a^"MRsofD* 2rJnM]ߊ} h/2=gSoY-%]7leOcQT]@!kS <%AgLϩTKzrPYj*~}bҤQt'Hz.N/qgT.S(F7);7E/{ݿz%!3?`\"ilEǍÔ 8KA\K T9+cMr# m:EW ##pz{HR.cj[p&4hk5pVY{c" Dȡ@Ͳ6F3"0`߱*fݚO'ziub# C@@-9cED"{᛫ 'Pq(KÓ}zٶ[Irr Dsv+fw it˿#Lea geJ}mgq{W/H noB;rCdsnhG).`ݹO"Bag?B:brp;I`e7^whʥS+Ori36w&A% xnY g5{/bWCuMr(|=[618dv$$1Sq4zA,}`(v~}cBN\V ~MzATKkg+Ǜ}U]uF Lo13i`&62^-Z-ciSA"3KvwhpTDZ7phP6br|~@S>*MivVU -Ѕ݃bƭe䆜(¥hrmZh/q`hA07L k-\OG{K' |%:5/L69MZMp@沗WV M?@ʑc"^=a{Ɵq ?H{ "'幆 :iYqlIf|uTkö䵏{ ѴT7Jb pKf^hTijA xomD8$ȑ5%7d'=WV%oq\MW`{븍{pRBݲҡ4ːrִy9+N.湟!P (!rNp醹3Iwi_ER{4"a*;Ep{|NX&91) 6J+r=)l*' 3%~==F^~d1BfMC>PbvȄD+?5 ,Uwpԅ0 |j)J>N/5r/{?ɑ ڏ5^z5+S: {iy3F)?E0DI{KC F5W혵vS} {o3NLy)#hOC',*ծ wݕWItC嚾!e~lxE46ãE O9#i6to`M@ve7}&2ka2g +-iYS DfWkeK_@<9Y=]ш/Jx3h(E$jq`>ufXaXʻV0FBerHwDN qz& $t5VO@?,-*"dD0ȄE`IA?\tڞ1Y(O՞C!T/mNǗ9A" ݛմHx9YRf~\&؄Ob_z'I,1VDf:G¥ҤS9EQ,53P1E$虐{F?8: &CQ{Q>O=9tRXlJA69^<*|R.M)E zUHweh"6ĎA}|†2 mק|Rn)YʧO0MK]2 7^E86DC1~LeW1^@}sʵu}XC'd Mh{ ZLEejEL_(tzpd[׉ҾvϋyXjrYl]{)ț>FcrNOʚB9d'&q|x@qY0pqO$;洯ыf“C3x^: NZd G-U{R_SfWx)P~B\!ݭ{,sk{Oș@+Y(عwNi1P3 qz<-讀fR.aOI7@]m"&N3, tz\Hvr9 ˙m8dO|_ 4#lf^T 8K[KM-5^XԣwF's:蕯"5*Hr>O4V*̯pa/eK.F kF4nM0f'W-Jo\ͪ!e<*MҸw".j#ߡad0>EolR K0عc@8J85G;zP !j3} <%S7_±gS+;Gdt y?粠,݄)\E>e<5zŰu Mc Ew3!#ےydQi}ŒpL>Q1I]55i'Ϲ[.O-cY%lnc~8|hbaWUu֜X y·e&ʓt"k ߭fcȆm^1BOZʮH6ױq)k=2wNJ~ MgQ{f .r'n@m2qItxZTpjŋzu[7$l8++ P$N$u0D5$1v3-g\u;( g#U s+Cڿ[ ^:ׁ p) 8&YDEV$qA&Jfz|%滫Kq)Gİѡ6iQMCYA{u)4SՓCb%;#̑JeڒSlay]7*N ՗Zz9vR{#=\4ͧ|tK ~a *ww }l.͙M4^ hp32X@^(jΊh̛Wҟuof.tc`U@gɩ2ؙ@,-5@ʓR.`~An!8[G^~5dֱ/ꤶk"aK+rէKG^LbZ,-u9 ]ZBSM8ެ2L㻣PA{*}v]L[ZM\ӁR@ή9j,p)Pyi=:^- KR )tQ{V3,2mdE4 sB'DS3Kkѹ镵OO$you^YBNH (D ITY&5>Wx[W~@t)[+^\ktOA^48K%ŁKُN`٘dgx)n0DY+lC[w7dƧu7|W`c-inrpGTQ1>σ꼘'g@͒):zF_X "/?,Hg:15&>L}į^Ψ(T}{_T{#]rgd hvBO7NJb@f'>V%%6 VXCBЮJly>cM tnc)9ijQӶԄ4?*([Z.XŠqJvߊ\]#%SSö8Iu.2x|%ѩW8/xa /ί Ȇ(N芔qΔiF^Npn"*Jyf5DF1XcSk4Tuܽ>t:t֦>xwt+ϱrNYp4@e?F{WH㨡uI"QEW-+Ad3ǁ >@!h"j$A[J#%yUE& U (2Д&Y'JgB0tr*@n j TpqCVu fj(*: {><,Q>YA!/@<;]:Fn"4Q=:h:-S7f\F*C'諦i3^Ơ4#y:?0 o|Mpm5kiqѥZS;)bU[3d. 8A ̆(jiKecV)r`B *VWEbls5W CBu GIOb̊>d#/s8EW)1}+)ҹh"c/rfY!(/kvWҢ|}n []yP# "FD+ȶϾx9 (\e=6ʟYA嗅v@8dxט)b;agkj3 L -UxC3Y)QfY/AUB*L'"V_$xEof]-?R}3'>͒9gyر#{JH<eDĜv!9KߠOT;Fj{rٯ\㭀D _+y$ȀE@xNGTn7%YujvXAQI(V%QC@9|F*VԹKůwyA~zyzF%$.,8 >I@w͉x?;6 ]B`NoFGEf-o(&"|ƙ")Cޞc:J\}n'dW3GfL|fxu"GsGIn!b{9eL]X'yacԅ5_t;suoɌgkg&'aC睔u >g(>T۹C4KnV( =kt(c F}^,zNJ9o!zcHQ(1D?O&jYLv-:3%m&ygχ,HoO/.w4Tr21@_vv Zg͇X{v' N<[m~밈gg5񙎄& ;#"zϳ@é8O3}4^pQv}@kuRٳ2!6vNfz1,"> N+&J+Z˜U 2gvzX"Xh5scuƉ90B} uvw$XcZU:oORv&-7VuqէȐӸ+v'P xUzSTe9}r qS_q ~~5lx˚7R D]czf$b vRdX;Ltt!/.ldT%|*Jc-*ؗY* ȧ JW+0\m0GR 7w:\S)szdj\b UKA= WąڔFICa OA"d/I\ bB5{0Δ w%ԡ HE9fr6w.=͋°o~[~<7rSGp/)lEݤƎqLtI'ԊkTXg}&2VYP૧kTƔ0KI2Bs,HA6-r(2h*w-.-Zh ܧm5~lXLs%YD؊QihaJ?Ʃ@ixnT c͟"M?q Ww &9"؆e6BKL:.?7ar xf!4{Y4e#XOW²BN4k)|m}0:7^lvroawAqE!FsoOKȵl^q9yǖP=F_]xF ἂtڹ UE;7ѯUKPz[؜A:w&٤|ާ̥Sxu'ӗ>)Ȯ+smB@3VB7u'w(մ۷3:1%)qJʭ"PofniX- kii3DмV:D (*֓3ZrNj\Š}@ӦD)]p)sYADJBXJfE˸}+2MJ]_(spyU}WIBԹzTp&BiUOL. *`ëij'Nz2ۛ҄$MG v-*ߌ[CB1T@"DY;9'=p^ň@Τxxʿ=a +dE-Uu zrs058fz(k'I ;n7{aTAw?O#4th#ZfiAV߀ ~>|GnPQOp-4I ;|7I]"קcӶ:(?L"\5`޾XaF[+9cfUFcTaZެjDMI8Ng(U37#v:ǎv= &bn ~ӎ^yg^fVtܒniR z:פ0ȶ9m1vu3!A}w_d.t^EsoVm ܎N#Iϸi/*ÔĔn>JBQaJv1S϶Hx&?u;JhK_m ^fRyEt8,KB / BDYޕ S孳9m㢐%)ZAm%`WnKGYAMuF^o"FlJ[BBBÿ~[vXEkDp҄s@wIwݴ) ޏ9dMa>kpr!yѳ/62뒔h#+ǑOBEF-`oL^OܝiV OcyAbR3z>za]d"r.8!WnHUżQ=rR`6ڶG:%+k 6 L{pVy'%7~mJQ$DrO_{ڢB >%!m rZ"vesw{rtI}!rHO>{ysgaD%8,y:HYTSBD]ǝIȴQI sާrꟶ0P\7mcFٝn]B²8 -"3_=yn>R.]܌L_Du{`* UwdAWdt6(u6{\g!`"Iд>89k7),2k"+&›''9ZAZѲ߀R> .FR63rM~8cA z~va+>`muu,~9wx:=t vZ7 ypxT/!;+$&ufP.F Aj}-Zefbt7=Ÿe>7< `=ͭ@<\dd1SҪF6z8pylo~`̓|B%GKtЀ@a͖q AxW~D\H>Ddw$* ձ@șh|o̗C_6y!y7r콥[B窻4:XCjJKhssûB*uKV4$3y؀7}-{gT1u5:ʮw9@s$=3B$ V3JGQ =h)A[&pJ)UBa;(QX-!ibrHg9=HPw=$*+9!uB B^m)f]`ATLג;tm#2]H) c 5Oo 4HU?>&X٫t<w 0/=f]a\t[T _/9bջl񆎔A6e d_kwp&e lx !pN-SPElkјK /ꆪ7d~"z(D?nsz[)KqP59bOXr۷.ߌeB7RIstløp\WpYw+M^0iH{J Tc-z/y-!PrT" cv fm:>ǹ4 E6t0 Nԇ-[@yqh+_5P jZ ed@Kh{YgRxTM}İR٨۞tYH! N״d~3VExos|ț v63>h;%m*V>hl(d|j‰#_qLܓ,cZTtc"S켪2Rѳ#A׿"M#n rf"nb&(z1 /h‚+ĝD/J6T-88uiSO\ņ?:qW*b#4[8p)[dѯj* -xoG{-[.t~x}eܿѷ 'wVQݥ% QߦF^k4KvDQm5Fi& wԴïN6\;p=,nB iBRYgC~%ol5dafe5.\{k{0]Ia7d\4ַSY?ienm{Z Syl`gc2)<AmrX˔tG>5>8FY|1w;HBn֢.ߛ}J8j;*JSZ)auGgV<ː[pXc)? 1Qah]ō3HO>S@k^IpWy+Ml LF|)iï=VLGyAZ&aO:` Hmzˎ핳FxA/۫~YӽG~j`"*eiz>I4=ةj[;13!uy&N5 m3־\ fy4:*lV.#ZgV#o1 s[\}7YW%Q/hܒ/HoVTo1ۧjpқI9sގN%R/:"eRӹ 6?A/$H#*ZD:(6NH*ۃe8}l0ٶ8oC\j"_E)~NjMĭԨL*ayal ʊg ꩥ/L`q: m G{:QQhBïx8-t*i >s|fJsKhpQDY9ΐK֙׊mhXH[JS#͟_B+ X,rt(ү!֯{ ys&ihݷf'*bi&$8dvwdfUX6QT=k1v7\12GRTvUמՀ$SoG1)EJi"eee-0>"7*̈́TzìzY2jSd[e;'KQD⻛a7Sf7ө6޴5HDt㳧 )5EoxQ (xu-l?Z~3 ץG'$%N711:wӬpkM{P||oxG1o,sWm|aÉCTs(CCCӿ-DR-]? 7S6nVBta4`um9d{?ǔp (=Ȇq0{e@NVÔL> Gք""YJΡ:E9yM02+xOR ﴱYEj KfG%="u량[/IbiT)%?idL3%?^]DB;['tF qڬ tС\P+2KD [Y]ʈO3g*@ (gkP<1؃`募){]G'iv? rELgo-փAc[>8b(Yk[2զ"\o/༙xZ諮>!1a#.g duc*|ZpCKB3B>YO :K W v_PGY9rQƺ)u72aq0<О+zj#ax T2w PI℗4#1@kӛZzPˉ'#=A46S cfJoS5ST]Z A\!G<Nd! pj؝oν-W:(8Ye?0 >}VE(iGCq`}OojCYI6c%WY'GB #!x֭$vj >1k2D,A Z2 g릖8%Px+<&T B")-~gE^:H'޺$֋w\ s^U"AԊn`)Y#M% d°ނfr8z+Lu9: %'B'`(;39~gˠ^<@ލ.皑# ؼʲYdݸ$7C{t N. K+,x"6#`R-͢2EC('W/5xU]s-Wy,h{u*e&K~$|r.% 2!/$na/*7988aI֟f'`PUf+jn|R$r"ǸhYW,;C ]@4K[={`o7n5Dܡvzӷڈj}~ V$7jsL:}|3nm.)+x+SyY XJ뗺[ BI{څ$& [Sj/k H,.)& ɓ5Boٶk}F\Hs~foʊ\4{b ~S}PXA%"Sԣ!z^RHNJ ' *v'|t!XNz[+ E+V-kr%OQbirrJ =<fd_Ԝh;&* 6p5u]T+ij#oA@A6# Ǝ8VfjJ>+ 6}W"F=2ks9`i r1FL54?k9߯OՈ=R=b(C0L7N C0Y/I)2uucݧ!a1 Z(\t:<_Pr%Q@;x$dX=UdXf"5o[wb ӎ4ēbs09XBe"?&!?^0aoT_T"Szkm4lk vTs\ 9>TPƚYh+Ԥ $SRMo,K*G7ueki_3(0 Ɣ:-|x~iaο|`')\T%RI3k ;֠zD:S_Tx6 $ 3F5co ڄP㠀yUAax3EN?bl= & "QqcS q#)5[I8ekj*hRfr_נ암+N /ʳA ƃJl(= X ĒDotknU侺1(JSACrxquwhQmfET ׊p jI~чY[ wB/ [ ǘ`Ifcyx/!4̶\")Cdwn8"/IIuKÀsXT5:Ri"V9g}?6Ta(Pen¢>q!qo"|#eyz W5*˓ i6}5=c}Om}`8.G^WRװ>[MIJ g-5+^Y8KPyղau|hlo|Nzԃ4R5ynٶ>T# `5dM,Nݸ)4Hom_?iu`ݩGKhu/V6M=g"$oE?`0Ӣ.Ćlvp1]= V 5[O ^%~gSBPB%;<4maRz؆EqQ'4R+Ba^>+XOBe~hΥ> Q6Woz:@+9Zh1VMTrIY WsWg>>R;͒ #lttP9G lh DѢG_FF Q.HcHb_|`hg2Q ;D.x>ow@I`sxHSyh<M->AvDDUAY_|iҨd}WJwy悽#Ry[1|dfiMcnd@ƫZz W{5l;3g?@R5iOUD m[qsyTV٩g kEMH8? q3Xt_vgZ<2[$Ӝbnl H~Ԙy+ւnj7͛6$TK Cιij&Ǎ(Ob|^a{_ڣUDΪ23HŽT$yJ -p;ϋX}Iﶖq-!*|Ic3* ^rgESѕN}δ.혤B>P=]Z(a}?m~z7k:B#UB iRBM"wBy `{hj@@2xts?.< ‘A\Zy.,#(- p@0W,ER.9w7Npr?]XRj5R09ɟc('VT:V;y[ e[=G<3 n@f Op[d_esAfuQf7FKrNx*c)?A)Ct :ųaf6meŰ(!%rTVK OH5֯(§A/4w#_VfrjrfP{2{.wq?0K?I*~>YTE}J&p&/tKƊߤY i٧**~!_ ??U{<PۻplIш foNǐ̽_rA*sp>s~Q̝wV-9!Erz(vziTl$5b X޵=aApi\m ϣ5g)`ǧ&I Si8PL+cZ<:S_8 ,3,D&R7HwGrùWp Gې+ƨubnmd5h0VOEY^Onj\?pc7K7M7=R,ڬE>/G"9]m>S 9Q$l3C'ad 6NmB58v#RJl}T>1`?3Y%ǽ,E[v"(oSD.iGP>"j핱bB1HH?z+xdK7 gJ JyY0K]e}QQc UQc52Fg,r @pP jFE:Iʵ:#&嬀4{c?8 G%~9n%'Q}O' @[,)iSKn<#e (wH᠛ q>['fh|=7}-uLM,X]e* fU4h~u=^X67dCSƽ_-%OA/laE"Unz.\DxTOVqCUŻ͵ntn/&$:0N9}e7*.`|)91 nnF}P MP(3*0e4?p92ĎgvYF >T\$"`pūn1$r[!sX0B_TR{9IVMGûVAjNI _Q9=v֖#+Wߴf"<+gJ]?o?N2pmR^6!B!ݦ߇h"%j{)+=Y/kX WhFxd_#m[[{%HNLz%r@˚[\wެ*׍5 h 3TZXgq1@lka%=C3:#"M ;Kt>P|yc K/ɗO$/;Ml]g9q͐0棢|(0D(7+(Ҩ<0[pǹ5i`4Q +)H064Ll(ɹj*tX̚|M\i"X -UTlQew=jy=^d?l<NUgA\yv{y5xӚ?eMb m"bڬƘb(E,Mf'6}{ R!J]ؑVjtkÐ:dxtfuW3Q3NneR 2;j}+<=K4<ףUB !0^Wņ٩oH8lDtbg1WUarNqH'L}Xhde*Sv|o$3n Ʃ@W݈Gs)Q3W.3!Bָբ צI31I5$D%OF[>i0c-D(_Epi໶`{2]U+^KP~ǛBG6?ѻ޺9}q3NW*x ^Ol(y L-Cx SxSq/)sx _J̐)m:99e>kdqXV<HqFkxYx~rwHb6웆>Zkn/zZvp~ov)~a^ݣ<^a29qjꯍAE^6f+n/5{߱Ncs H$P7POl})Ƴoo:KEB^ы?@= EEWTR49 V͞*q =p3V}(Q p 4ǨdHL֥~^}ՐmVu.dU Ē.PKD^%"S>ΣU);12;PѽJ{WC98겳}^q;o$ND??կpcM6#2.6bK*>5 o<݊#qyORyp%SjR1qوIUTr.PꄲXp+]kmɟ#?c7/vm{C,p/2yڙ}9SA/탴4+C Tsnِ'xnqh;/\1=hſiY&8ܯLrٍʹ]~b': .dH{펑.9tOxK"=mse+Mo!T#!fAeg5:>Z Ǘд(@"EN:} Ȅa9fmcµml' mrSFv1178N::!Z9//?%a;.#<nqݳCt5ءx|?z}wY}JAw?f G,_S%gc]gR7kAp8k@zwQAM:k1p:]VXkWhF̾o̼CCS ;irQ`-:?gg\/ Vpԡq'iiE2 mQCf-eY~ LWͩmaφ/\ZS[U_@2m֬ #806%(37Tv24 q}Aԗ~xL1.ʪ\SF_rѱ%^d=U?=mhP(5@S'8sF.<#bE "%)cFAJ.OjcU<"y4 5t./[)3cy(Q>b  2&*`y= R|KUDQxHx]1<:3 zX*vgo>*1'L5 <3o R cl؟ۇd֡@V@Jq*iJ]q񭷳fy1ԆǐB768r\ώ#h8&}5UMR0$21x|@/N(Y%l~Y&jn>n,os}+;:2swb-* wHTAXvk)s@м&x΍ L</Z 2&꿐}ۇ !&Y(6A5ۓH0O~yJH~[3˂"eD$ֈ ı԰+;*2 ĂnVWZ 2YR@x ƸO?%1ffN>1#hV`eȅ "u5nS~AFoBΑcx(\otqߤOy/H;tvNR:\[+A@O9" Jk(2"HcN(7_Saw@4U0ɺsYꯥ}5qF O8:/BkǍ1F|S;lx3(DĢk*JOD:a` =7h^5Yki :Yձ=&q8} ߈83U4GG G6u$\@HXcɺ#=WI ZNz\<T3g5[QdnsH,ofG?D6$J^ nBlXD[O:#LW2̪VR-찪r<*l_XVʌNGuM$<Z?^}z&}y*ʦ+aÌaQ+=SGrAJ`.trJbߖB|\|KxhIM!yD+#轿%ijDH38m(LeU29x/ȈOn6N>^l~fTtLtI\CAઉu]MAXZ\lt"za3~{hsfno]N1研 ag%Pq=zAsM٘=`6ksi3\lg~&'7(oO],3 ;7GQ[p`czX@hpm¯%}f¥zT;mDZqwȼNM(?DKj1l \OL#[-CvNV #VӇk]j0*༤?£Tq8wV LL~?iĵK̍VMP1SN?H:9_S)W[ 5?gPs+% rc"] Uj-!x(Kk!=,d 76 {&v+Io1&NW553~euSݑj7TV0Źy>ES# *>Z5<YiO ŧhXJ6:{7:tkR`+uPu^!)b3#A|+EȒN'fgV @ЙK9/w 5bt rBaL9lH@S-Vo1&f;Z~scڕ͜goۗJUsP-ˠTx%q [Y@ ZT>O\{-$B0]yW&f(bEzZq|\mc]c=&6G3ц[5x0Y){',)HK`*"Y +2UvNQf6 eX!t&ceeqG5Yc7-:-2uu"=m ip'QPn(-!9L+;W=z"-R؆"} u0 GmJh}']nR@8ȫC[fჯXX,.z]NǘKƨ`nvjg]#7{r9,P2Z#%׃&0:n;^C5*J@/kOJ [vXyN3yX;㛴[>UP#cW22'q%te9f;o;ftab6jǮfQk;a ]F!?yԃ^rW mpLXDyj/Hݾ3/בJZ;@݁IjdB>s Ѯk](7ee\8 T1>R ޝq@U_0ǔPP r12SnLA<6볘irYq%UӲ-l=QkOUT l%BZ02f9B5))6}IidgN6G' De]s^޺7$ jv,ꩳ rdI9rgv1UQHQ6dMA"D6P^Vd.|c4_2b Zio0A4e\;ӫny de rwQJYtxλ+d%+YzC@e-m:}wn/Z;A6DO͘TF9]a$@D Jc(4B\~\lѐz8yX͓9# &N*_vB WFR2@}z.8q؟vv,]F[wKuk_oyJP)KIsN &UF 6HVl3A3 M%Y#P&)wHyH)h #q$J)}A(>c,Usf-8FO֤E4zGoZ=*A1'^G0e('4%4?ׁxS3?M)lhriH(sLv}^irq# J#ɹ&L_>$M3Coɏm0.:H5E"iC; @n4qsDϾdG J,HۡNRHevԥDC1qԌN17 m#2u](ZPv j'ֈoD xQQ"vJcĺi".w$).x)W1΢-ȇyC8Abבf<iż) P̬z" z|ʩ7م& lqy%'T()1KmO8 5ǠU5%=A _ft-fiM6Ϭ6?>YZˊ$o'l=%lT(F=+Bgﮨ;k&tcUBU6c ja4~C.=r !wv׈AN($עvk 0bO`܏{]fؓue2+5MwhB@Ǟyʡy_S Yqp.$,J4 /˜ ֤]oWQG`l,:i7 jVR`e 2hQ~DLǰWTڍu+ Ja?ds6[|jvM*Jf r54?Se U5%o7.7gk7 B!A %XF0V|a-_^3W u毲#0;^^W+ %۸~s>qf+ޣXZ 좗9ʫ{X ȭRWnS xe2Z?9n HγLs8ْG~#JHȯq2F 6yڼՌ]gt]^YI-5ܼO18yK'k&0%ġnXQ\ܪulh_Ю?>bp+y%ݗ2-f*9;j ]#~ARhԊ!_vXCn[hW.wIB HE+f5[x}*|MMWE ڵ#vb]OˬpBJv \+h?}<鸷,1v~գ"Up&|b-b t_x8dأm+!R68 t AFxI@{a  yjbˆ]Jjavp 7zgK" [}w'a~SZN|^7q0iƢgoAĠ &( bL``c"KN“ (q7sM˹*нc 0bܵf1zʂ*³nQ˞k=~jyC*I_è!78]=w:]!3 kyc0^.Yy\ u3~|4{\-O}>5"S$?FcW:܀,xdFa"ttGх kJα9Bi\tc\v+c(=ѳrIͽk" `whE#och>( @;5}RwKe-$Il&ExAhs8+tjfyY८`ג_˽WG"Iv1fIUNBD(=?3yBh/XAx5XDlGZa WoϤ Xg3F)}W-2!p5f32͵Qz#L HHbpboۼnk4o jPT׊4Ѹf5~S. ƺGїrUT5'>?5f\R[%Jqnt:^6g!˜N@8X,kx)J0 V/BZX4X6r;NMH*Dс' ƚ^+Pt[-FAeɘk$grCM`whʯQ*kO w3%+)oJ> ԒuxB]X4cff2$.ǽx bqsW+#a%œQAn KsF5;+7,MuEez&t۵MɌ5~O jOmok *i)4w'짎0HKNd _:4?ɢ7? ܴ?8fþw /D0G@̊x FP:] CF#hlW'xaNAa9ʲA]m WfəGFeͻX%ɶfLG:]zW/ĒaJxZ>hx *E[(t&3ʻdH%d2T\=dcZ嶶K6FPWd/l>V 2XuͬEʥFɂ7XG#0nG'g;Orc3Kb=kw ]}f+1;.y̮:60 :,xpU~@Ħ4Aγ$lb>/nuSL?~p[g⍐vrh&r_ftdhEյ ;̾.eo sWQa0 >̊z _b̆K#^cp 1{F<=t/_~eTah邔.:Bjڔgv-S5?xf#geL ףtfIU'v;̰yAsϠȀjVD j†o+Z銭 -u\>w8ڜFfl)0Jj >W^bU5q^k0 5GIbgŰɢ*G-!" ؛JʪvJLf\gnzt)H̀@,βp+Nr٥3ɯ]LqOJ97F;CE3[f-:&r ioawyml\(r5mjD,l3)yٍu]xΠV:>'[jjaG柧],ak؍9&rYrU2 }#G /2pzqjUEҼ$GA8Z 68Ps%X$'>5ZfG66FYC?$(=;QbsZd<$2U'鹿$pPj @Xsv+}vIuM=ЏJMnmty_S"ʎڡDoz\e]1%̔;l |eG*Pyx9L(xS@#nżĐ(R¹wI4u_7C`Oh9Ey݄$RbZ5`zcȎ+rn >v>-)J_V }AM 4᭩c?HrdŘȯH}ln y+M6_V4qtk `3`(Kˍ a/8˫X!)TOnfnїm힔]ITۘ SaKZ4T.JzG`7,b2ןg+B dbgqO(<54]w(Bc!ɫaoUfXYQ NCJf[(c iֲĥr 8u$Aܧ&4FK âU/t{@28w(V, ip 5d;w8&U `>yC!0kq/L2J==56=?^}=zuE$h.1}e(irVӲ+lzJ )k(^X^esSu*yY.J]%Ќ/%uj;;9NO)rV fY.cxqUvoy6t-ɸ$7`7dmeo_3͆Ұ|a>j]lyuMe5\dn,&j 1t/h.wq"wjZ:-F1IBq'\!xFKE㝤p*p _"bu#-hUbԁv)]zjt9Ygʀݥ:ͦ,V;?Hk0 YCLܒq<-jC!7G2LAYD fIԂ[4}1R lQkpy"$ѻa3:X/$+`ߝ(,VC",;'Ml΃,eב)/, 9sO7&WKBLZdOUji֛ח(sQ!M1W/`G?W6-5G)$سl}^։-PjUVxx>; vfAaEXѶrL Z[\g[*RYu4/D}c 0r mhd -v PͨÑ((5PA."g}}#C4mms?ܰB<-D)?U "TRJ8Oba| U5-l3sULn]&WNme%Qq| ]7d, Uz Ӟh]W 0bm-=p"dSgg6 aͦFC2םqnkƮDgHQ~'|f $%`QlM0x%7 ,h  j?A;#+<{4a( !-}87}@Ԝ8.h w[B"eÒ.ZS9}+E==.rdzerğCozބ|D6c$>*5 d÷j_b#8}8V:&ķ3.8\ ˶eٙh. q jڎ::m`e/'' aHd˰ -i>y畡»^$o[-Åɒ^K -QjR޹:Ft="J휄e% trQ״bq$xv$4het#k<2õ^[NIa'u} J@FJi:8 ;6VD2Qngbm&ak$E-\11z=|z2\.u0笔6 Wn4,t#oWw I>q$/|C(OɜiCDF/k1UyW| #Qq"=aQ.4_[q/m&u34Aj'JgWN•_@?sb-3kC@`EyghTPٟl#nXVd+6fvO6(OӴ&q=r a`stBضb^ s&B*|O +A&F0Mlթ#> `x+=^L()T FF6jpo{]fZwOoRsenc؝Rf8 ýƲUWu;Z v؅.c2fLnOK/ʑOl#:H,d0]E`R^k(qb#ihbqqo(MB7řԡ(&7exQȯaEGv~QGFDBB"1!@~T?cp:>[ F/TgA!,̢"Gzp_ =>:vu7}m w"Y9P9yi㧋=s͍iA@&!Zx7=/oGŌC#8~xe9۾Z}S%lxt,&9;yӻXFEg^;6mM)C+PNX7A! IGyl@OR"kª[4 1][^=rd: F:ђQ=ޫ6|c(b˚}@1d=&ZMRAi#g.O)\τ}ܤj#*DZ,Blxp {'B/[24fgaނ[7 gCH'3Ijfe剒n@e1%&?H5-b9U7,Nbōjpr:MWW-$ד~dt ay=ѧE&h~˒n|9]"Kʺs+e5u4vcVDnYxo1(D)c(XT0bթj 0}J0]EP#uF7F;T߉Ɓgst7R\`-_Ne6|[߄6MqNIYڮr6k+H'kdW/܅3 laN ev$W>V̉{ț~ z7GIL 0ԉnhQuAr^d Q4 bSCH),ć݄%vf}BIIekyvz{ XxY<,2-Ρz-kr KQm+rhV|d[v%.&pe z |xʹLbҦNmp'R;QƱ5a_RQMXȎDO Z !`Ã(u/7BX2|Xtep{'96r:3 J:P/KkLB'o$=i"~.k7w贬d'Yt+8fTuu^\R8;E"hEDY:fuKڽ :C٪rKc7~m!Ư]"RzSR&Żޚžɕ8aww ~CӘ`N.;"L"v 4Z0Cgϝ;2n7G iCNc3jdR4-b,Sqm $3v318`㹴 ͻ|XYI<7T=BRBүzb#~92p.s@Rf/>*ڃJr"%{?(.Zv:mEn4nösidi䲹,*O|=\si:\V,֒bid{_̄߃DU{k(,H6}y8#[]h.ᐧ#RBP|:n -Ӎ 5$ivkԺ)%fN' _jizag{:J vWYܸ+GmwׅoHc9O>c?bT2B8nѽ>j!-g6܇Hl };ڝ.](ՖYU޹|GݚΜ_DmR *h)wMJY ڀRy.V;45]ʰ `gaad a=,N?]P ڠ58qʣ |㾚j?D47C S(ӻMrl`w{5oX:S^ nօyDUA%K514bW =Y1@<- C]”'qgb_?F֦ܲ!YW6<sZrf:@0w&Nb ZɁ5" ^&x7f)Gzv ; m0 Y67Wp]ZaO>_fw\~cVCVαQIw!if4un`y+W@o TFԡ3&֚p:QskBӶ3A,X:t>4 =T3>BGۯ PBhtDҿO]Noaؘ$΀\W~j@'Hٺ?}%BXd*6Mzp>~} ?R9`0k+BfEoq4m=B,vRRzHkl-pdz%9~y."Z0lQה{-# ̦ ,.} S AKbD5LfpXɕ>Ö9Q"xxљPP̵t`&-"!FcMn1L @$wgy2 .(Z tCm.tUE!֥]$F~uX}?-I+@%.a^ ry9%!񮨿f] ˁ<>S( suƶ!lm9w:miޕwOh!e5|RÒgO챯' 8`biQ`~<ѓ]H'Egn'BLu 4Wf@ =RVk4rOVw8QC$`~1<_' mœWJ&&t O4[04{ ,~g;l 7zJy1R=Nkt#KK1Tb -Ӣ\8*Upw߾&>jýN1B?dV 4W -$³S@=УYkF=ASH 8Kd*oain\$Q4"6Rp ၞrh/8rWŮl4KG2V`4I\F1x:B (L8Ļ~5y|=4{`q s$_ĊU*v5Yo'bPpݢscZïQѐ<2Gʼnʼnfit.gʣdmbdɋ] kqFfD?֊2WpV\3l]έ,hCD>QxQ𛬅q;yVJ'!r'JmO3kWp=&WA׉ӘNc+kS{'dԤ&4<3|FlwYmn7%'^?'p"0y |apz\wBZY/=]?#98S8<@ |'nf1X:M J>((DD9H`84/Rަ2M5ZVX ")aSLc#n^n^5.WBٷ7Ƭ|^bi{B:(UCD:V7qbqZ%"Rp0;U<$;;TfE߷Qh凜l~~9đcUM`fa+o}Zm|8F h,]u{FjqFۣH8 +[LHHLT pI8S*[X؏^=*Û+n}DX5M_w-3B?pa= {YͿ3Kkx9H:!xkr`-q ;.wۆ:gY% g-mF['a{P|Z4nJh.vW,]KȚ.[I*],00ƶ`^')Kn6_5&Bo9 }طvkSgucio` DY9ϗTu`]&\xvh'LQoNN ꥟/oVX塭'֊iDNI:Ht5u#6Hd뒗\ޕ'F<ò7D*yL\awLI8"M.-(Ӥ4&8 BŽDԽcra)t䦔+&V-Ki^C?7mM%2qY-Aϋ>xO d;\p.hx?'֔ PꇿJ9D3Y$9+ҽ,V7uSk8S3p8& .CWMX9Y j9R6dw`tgx#??9@"3ET]LW 7ah |QVtP Ra""4:]  s&vƄTӦS"=lCI>32ue`pz LsעJmd.x쬞)C&[s[ TDgP$W>ꕢآjͯNvjOaJOo.†*@n݁SB(`a72꣫GnSuƓ6IoFXa#V2l (K kvAp1RSA>vet =Un+ ˳0iQ,T.U۫Wp.n%oI=:Yc1mnZN,O\d@ʈW8Fm~ * HdڇF V&;lC+EQ$q!vq=o<5C<&"lq ڹKWײfK`eʟc|Jzm O;ĢxA'Yfӛs ]Nv/6+b [f^t7kXw5};H0 KCq=]<_Yl쒱ba,+CC87F9ރXWއapwm$uWVߋƚ6Xmڵ߆Fe`V$'xlNMSKO8$ĞktEf@$B#SzAZ?Wd*wj͵ǜ*=f_meYqBPd H=x_i%o w)d,sQHKlwm%A_,F=aoR&@NsfzO)ֈ:À,| ~Dv))U60ݤ>tY&UI}Ygdf !˨]VlJòPF`aӶG+{7Ap&V;(~'HAw*>,2ZY:6mEfwn]eyg4K&Ok2Ϫ2_kٛeեcQ7XbBy".ʃQU)6 KUl"l8P{ɚ V\и2HVU\wvz|n~o x߽T'K@vfcSJ#.VVUhf%R>\UZ )i{P:_ jݻ&TwdV5&ٸt߱W.d6.ggAHLW솚NԒq"1k PZ  f (KXd G6mV=+,e`Hlr[ 뎸aW7E56,CYq, {HFDDoC :AkL/)LHlF2gxYqS0c~V,oET 27bɯڹU [QvtX4yf=d-s_ Mc9FC`q?)7| S&՝t0yz^\z:Z2nj\8L|¦;l_> '<%L0G_8g94$1bZ -X= y+xz,E&7BI-OʟzEN7r%yδfm2@ s>Ɠ9SAjZXxX[fK ^8GBߓBw"Yh#^/f&g߭ jLiMT:wuD,དֺ8?q%(ĐrK+`K}8TAy#b2 DB!Q3εMdDI@B*#L|rq Tʖ`W@xRc8R{>s^lR ]xs1'%(cG_Q/8ڡ5El  @ \qO$@e:=K{(#O5]tbInʇ@oC)jmw){[߀&l*V\$%q+`)Q N ^)o崽f/,x4N~ѳͱNnr9*Aƞx+ʬ:-g 1faZ&JB֯q?r#$;\_XoKN_.̼Cdiz_ `'rP"ij  G9G /UMrˏJ" 4Z]=q,n ]L7+A`Ȋۡɸ`s ڊ/nhy})lWÍUb3dW}#3kJD;$V0-hY 9'pW|8%mk@ &JW{)lig[%RKýw 4V'V0G5F&b۞\w9=ۿ^bO\7l 멥;U=Y?J1++-M}4 ku3+’bD Dri3%cv$Tջ^s8I@ix\i#'`-NVl$ 'QQf+]OS$~pD]mpwxI o(;+2Jsi`RٺPb ) xqaDB]Ҿ/g/8^s׮ AN]rS/ /&!vlt/^O%qrvb9}^ aʒdž/yqxGPOU w_E OX|G,k*JtNPɎbP6}v;#߮~" Lh ֭`X|AHEqRV{&Xk#N1QkêVF~TD[NB¥mUz<6Xǁq!G0h&P{Z^Պ~v퐝7Kn=BCG_&کV}m3jQ808vlS48|RJ`-ReuD0{BӔ:'Qf{)뮺gA9iO5ܔ9ڼYeE%簽qHjdO}HTf’͐cm͸\11s!5[ ^Pհ Q y^\?AJ3tNyH$2+QWPHT0b}; v0]koilvZ//45nղrhNqV:FZ#r }f&N9/-3W|]s[}$p~1KOW䢐@7lt\Kڎw⌋ͳu2jLf:Nyd^ iz;'2chb ìÉ䖄p@(Ka%/a2qo?`C5,59Ӄ V#'ޡ&Am5')ZdܔMʯѺ +'omtJ`"')x}ƕ A}醡zߵ? rka?"*_'VbD[kһ"%luvvgRؘriCJ}'u<<vZh}@g챋 Ԥ@=փof#TtG,.09Y5q!$쀓6erq1Y鷃s]bevk2Ȣ4%)a;W&JqNo+ K雌R$DT$qwi: ]غ]9?~]'MDv3gKT$pw.,{S|S}p=bU@e睋~_w ϴ[@4QG䦖GZ]‡+ \pNSN ?1e+RJ,} x廮cwPbw"~0]0Nd 6 @Dm Sai3DќO dpsGx.&cnڍ a}GFs PS,Lz- d0NM=nyTqlvY<"MUMJE^G8@ wT;UY)biK `wM& EPT& T.'AeXHr&zה%=:#KϷ#>g>.O-+k 0E>)z+Bp~I#O$-dJ?ƦwwFQtAQ/Ӓ5p?pJ: iOta*/ȰNO4uS[:DzL*FgNG蕊50HVyHV@Hu7"Aq9DƵk=dQ$HD'zeʼ ω>AYAlCpu/_ƴob*y@Dk3|j5iO+7'mbXJsHu ޑRO xvѬϬEPD‚nr;q5ʓsb $>^''t}apLJqS: 'AFusU!Sh*-&>d_ 0ç]ptt}_ 9|'<-.(NP_)ꭥI dټ5 \hwRѦN*a]92+ qՊ Zn! ;iFV<#d p &UPBS=2G0!t;[8 IMŘ#]-~סg7A}063Q)I_E#]B\h.86P L$!WRSCgK"9DQtUQɒ~:g:#-5΢/ӱ",N`sL@-VY2J /v@&|/)L 8 Vtqt~E?tNS,[J/7r?DͷqS,;lkR6džG ?>ϬrZ "ԁ[Kp=E N嶩D-rSתjyYY8bJ=oUvgٍ1`oga$ u˷ݮ3MAԪZ:9kG zj$s6,"/G>p+y%&[#Ln L'4RgG"SAmc/ufkQDa SmRKQrH YuWP`{'JоW֭ G-.$ҶKʿY9?SBLH'O_.' uOʸY S^Z|2˲r۪EJj}üh_x4 aU+vL@30n=EQ O[L (ymp)/Uxʳ|g $z"X> ]ǪURΏ9`&uRau9` \l=&Ӣ U#L.Wtj3:  hX9"b9T*}X6,z:M{-m WMQG8MM`hY&yN'<{Hd&c` v=m(?s[ٷ Yz^qI$qa9 6LfvFh'~ myjπU,A4rQGG?Xٞu6X]?~cj@5-;au*Ξdɧ8 8E_2>dpԲz;,5V$aDObS3 h'hWjar:v$`1z2~QR=Λ]S`_%jT+Z{KE[ ƴe/g^,q.x_$ 9 p7{Ugw͡W>dQxgL`\dZz>iN. jAѓn{2DoWf2#_E{IRAזq m@kp H ߵ֧V&zh'Cg %PYFvbӢFުDS=?^ G ruAu܀PmjcKONQΡi!$NFl)7ƃy*Ԏ4O_KP]U5+쳰Ih|8_f~Oo:|]z[Z5k&i#&{%j( NQMkܳ`yU7c&ۓ/->'`~v wXp-G=hJAYe }IvBASX$ aXO1vAI/,%O"z4G(:l2v/t"M9KWa %җ{~fݧC9 I$0P9YlFL0<}'3]'%#`~.L  %zjp4mAV͚ &.щuj"NA={?Tsh9 ^/ʭ |<.u,{)kGQͨg}{A/Ƶr N}'Oٹ?Oh!c bohӼ-"{13vJhHJ(0]'2q߻Ųav]8`d-rB%0/K*:ZNv%_m!|B'ZDFӘ^9x5Q7p'^VsPLt_EӍ3 dj!8xMk/#rZ$ ?0[#NLK":w褦Dzİ=Gvϡ0UJ81Ak'<^)|Ѣc_.;KʙIBukϛhogiB#Fl(^k&~dKsPL(e[~Z5L C\xY+>w;HW-Daؓi8 K/by;E #2"6dJZ2 q @.i*pqL5} חۦ:l3*}WQ)aSE-8k1[b F7b%(.=R$ cHxaq-,/nBfs259T"yᯘ} ^@kו[/eTy l`/'y)@UfX+3u4 :(J!2\,s6SXej;k$J~k5hx8#vFxKy$43=t3%F!`JIC̓袻r 4ŭemܻ@ rB\ap+M4 gjw+=!CնYŧp! CKO-nayHv&;p&s~(!^> Η<$.pU3:Mz_Si~(̾~ MBI:J}~\Syߵַ&tT&&H/oE85T&10,\Gd"&]QŸPDT5w%JW.;Gc/ڂ ]r`}wya尭N%UQ F$%bv"?b@lM$yF GȂ݉J3r {'Qp@5H;=^UN#?zv3u4Xnyh%DXb4#@drE;kZbY58~%|Ym^wCÝm3(1.G 5cSKs0WYL|E 񽎞2[]-E^DL܊Qy"H٩/C\᫆1B:%kUU%PQz!۴*d%Ư:Ώ &n T!j>ˌC/Ej51{t?g-CﰽU&"i5 }$AaJ' d2]7JJߛP'2sa, (l;C#I/, *R:CA{}vk!s[N#W^<}AvHH6#fԭ$ 8&(mP-yƹ]p~Yk^kt:7P[Zv]x %XsSFcS#=_1d~5GJcٙc KCn+VxT&hZ0s{&tkêֆ5~eJL %hY q:-1'w68a՛I}/ki i@\~MҽT'͇0Qe.4t691TWn>3%$TM/͘z|ylރʤQkj2/g91u/]xy^)K}:Y|mPI7%_|K٤ h "3pM2ZA@$``7xIO~D?1, Ħj.LML1V|-*iRuL. 7 !U8Hz-l8NSۺsZU~oCQlV/SڎzB)٠Ӎ`H-S[T4)F6-㌱HJ3S`̡P\/v9~@"u*#(#49.ä8Ũ7>C7b'…] p*0hlնɮ`"b{1bģ||8<)5b/O=+R5Mb`-5)aqjдqׁi=vfGVkW$TU?&wD1zXsj°e6-{ۿ+ƾyJ5iPKv+r06<‰D0$OVǻFk$d0lRH)V Zy=y.no((g{V({?ZQAټ:i]o՘5|-bAv>PiOUf6 "h&_vO{,D/ "ʣKke2ŸH6/$+ c_X&^e@69 u6T$x.oQi7o:ZfwQ̿o񰨤B^hwh :< DNdq@%]@_27 㣎䦵,veC!!g% ="ɜeerSԺ3>p`vd):U v,:VV*[.s9#`#5Ts_\l?gfcǿA@ ^`uCn&4^tz·Vw|>B#rSN4;atnUtH hJ1M]B"-ܔFURo9 q֤՚R<#=FvsW2\ {!x>jG о}˵`qܶKEAnAR|}_3i9MW7@KRTwڳ(V*8}" 3-Z;(I`HtTڢfvREny}KDCTgAT7'VY}G"PQ0u(pc W7:~uD4Yw2xK( CLYa渳 V2~='%S çY~ւ-,x{J@w=0_﷩Jd| nXѢTxWHu!yaU)b S%O>},n6 X-S5n$NMF/_W;:_WV*Sh V0^DGceR&W^Q;Xģ04~ihT$ID!%ܙ;a3VH"[A+l&|+#%>}YGPt]l x'!mh\M8GvC5■@ʸPO]dS}&* F)SȌW;G-!۞źK {4M18aGT0g;%bV$Zzo#\,UJE;qr~Zh|\ 5!ZQ.4W4`*DWd{Nok\)ʆ m'2Ӹ6$/YUq1E[Pd#ޚ&ڪ9h]:> X.=αȈ11_U޲|D5kiN"p?6pMBbbFqϺӤVQHV$ p(FRJ׋͍&qd0|, Ͽ>. g>߹#yxuao /M!GY0q'g.Ś8xwqu&<& a|u1kiR+ X\3,2xzЇ"n!'3^<<0BaH0ss.ѮF 2%\ ׌b H2,*i:D61eJ<Ҏ[?`Kw=R]h:S7 |3ͳn,<$/\7Ę[#2Zu3EPڸFP6VۿI!) a?V0ւ&Cb'3ބFSOD u2$'jPUd'F2>!Q} *aA޷= ?n=1ۈC:8D,^>(\5kVF<ɖTyܳDMkغ:6cKQUhOB l°'zg "_^2"y“9gf'&Pn;_`O.X =ś o>m [Z[& lEY)ýzOqA7g`ń+[ N *CwL ƩS)6 |в=vŒ W_eMZgH8.M''6.gX6}@ T򏽮; M%GLH$N]},WT,oe+vl)Af~-=>j i{\I|+ZGtE;p:5z{.O,xC>0ĪY< c ֻekɬ]=lKM8]|c :Ҭ܇mnq u#)P?3Λ3!lQq!Ml~ӯJ >|cv^o]`sljSYsFrH#lvH[u щEL*6hr3 *V)Jbu+* R2 SlncHW_̅YZtD^1Q.}5`rse?㦫?W&AVΓԐL;EV* /uD*ZYı;$g0["dZ?%+ gMbA8XOjR2AgnW~H[HNB̈)bf_|_ތ^J{BO[d?mn鳲f?I&hjfRbTMMPf_스(]'y#r*r8U@h*1NijE_TBu!FK^2 _!qh 2G'-N N|G*i}nzpqC0B0Rixz&;BϿ__2%S./p㞺wǩ&X׍V.hSĻ|dz?ɋ~؀aKm]-PP%I$z 8hF0| w/eB3c"d8XQJU=UFA=xV1g,S\[A~l"<[)1c֊tGK2]Xs`"4 0riKK0rim\.y*rv^t(^6b*bCN,zevGu² X5c8fQy>CYܠK5?,cbꞛA82Os]dBP-Ј6IcZ(jBd,0(?Dy^aH<75 >Y3~%ͤ@`zuOÉkF:(_8#'p'R/4~<" |prj,ڦB@N3C2|Mz-MqKm)H/EiOX-|Gy}B4k.ޯ+\ŒH솻"ɔ,)d3 Qݼ|s,T [ɽ\ʙE@,?.[] qJrX>akL/lzl7Juɝw]WkrD.r EUP')!ra6F73WD$ W|_իi][cUZֲ&`0fZY%|\;ٝ W2aeZIu&ݸ ,z;޽6F "Pa̙ Kzj51PWn%'W:٬nZ %PPƉ y5Ϙ<1<&vj (Ɣi0Ƶv:F7ϐlyMd1w8xg³KYh* \}Vq280m F^Y/MS%Ve&?ƛنƲة >`D0]ˢ3QTIQߎdyҹLVyB,ٯKO\q;|lʛu+[A*=3@vBo]]ƚv~8uHd*LAia{ Xe7]P VqQ1]hY͎S-F;4$"_(1q o JϒWU{"vɕ$R" o͕_t*hYk2eAZ\C7Mrt^`Q:D垮)vft(5ׂb_ۺS;DNOpɲ AO3M FDQ#G@ 1q<#?ݿ) (8W\_H_>d,6^$@d#WI)Ùd-'|| xXM?sIw⫤7Avɏ ,&fv75!4nVmȲEa钚bB h-xYARHC~c5DiRKܬ%J4 v' PϩEa`!)ti;b4LN -3H]"h2fޞ_G i;2%w IH`_uT-Y}!Em3w:{d ,ySNL'^45HgFԝaVx40dGnje"Iqn3\Sѷ؏1 H ;)y蜍Te.p~u@-\,V̪Rpq:څ@߁Ep7w H+9q}7.䮼f^"&gmR2Ǹ濨_C1p"I`$r 956`Lr^$w,W0FP\Y!dDU (` ARP.hk.@{nmz\E$&)Ak4ܘ%*St6?Ym}^6%31A.Y@H>){1d:-:uW9Uy4d:w5q"q{<c`Yi*!pMhȂz|AV'ow0byL8ah,:Rr괴_fB_Ȃ` ^j)7]v 6yEUj`_X6H{ƲZ)m6a6qR>ob*⢡ E4.$fzσկPY֡ =Y ATpvy} Y@MG18eL*B\:cC;Jz𰹐SLb x/0F/̴,XC 0S!'eJ`Y,EF&giM^QloG2?8dq8yȇƏh|E+:(įH9݋=n53ok67`RvMklj~ݲށ[[lLM_TaN=Ebt)/ȋ%*IP{B{}#=,ǪߓI: pىʷAف3Ij7K0c3B&ka$m>ܚ/_(<90z>mNr-ĉhװ[ۛIlT1e +/MsF>La;5˯_Þ8櫣ncjm:x)t!Z@qJDxSl[9o;YaٴP Rבڽ Z<-*ݬbm\qߏ%4 \;ް&* H0ՙazfu q;[:hnAi<|e`G:(:]NE_N2d!644d#J-V?Ĕ. e*"ڍog-Onl!N|%A#GSN2C~ZFK貢h.FEG=x(`!N8@3hü]hW-T'JaX݉Yz~}pAtZyYTРze][1>vq[q Sx,4f[KuC{F^Ե@pv| 8wBƁYd=FÌgiUoo/ml zG*=r1!SL΀yC;Fh9KC}h'RPŠsw!+0AJ|j|~Py̳i ?drQVHDw կ;l7xE-e B;P+$yŒ!TQS*f٩3e?M9_qz@q4"~f6^lN*tw (Lʻ H {pH80ǒL!_UZ@Ҿ\_ i7bG[+W580Y gn+t/?)8Ǧ==ԕG*h9R0ѣR=KݼORDUޡ LVQ\Cw}&C)c P?MAH+=B 9m;hlPFavTX9=o|_ ڦht`mp;4@Q̱$}FK[1Í'eM;͗+SA]X&e&Chsp~E.ol˖)%2έRRTIӗKml,[h'|6ƶ(xaMFG7T? {a|e/\8&FbcxpⳒhSΓ$}NXCrfp%${ӧ K+') %?4ṫsCaMdMfpK2x,8DR9w>*c/$RqA t@ٜ bsTBH U%vF :nIc3~΋jFN0( @Ż>l.֤X HG(wP\ʊ_r &4u]0}l<| > w'q=C9.2di)=l|GPG'/Tϝ4a{ydձ|m ØT\Qav}}Qx/< T Ƅ2CUMd,&K9`7/ҮgWAN5YK'XGIo\Z^ɛSS9;$̾M7fSxE"4D>ס9XvM@*zaʏL7aE-ld#smQiL&wj'Y@ u+E)1Cyބ9J ӣ J:^vJ$(Ui,aPw2E\?y#?ŶqY5 0'A+=ĻZ1I[ǽ:,~K|[6%2tc3қ7垠 s}e`kE^ޡa;Ptx _8oDŽ>uv5аyd \' pv0~;O`|DQЩ XϞ:.f3ŷp]p`\]b93=;F#W$vO`%7>(DALws7hWՐKП( QJBn/|KHHZ6( 7ec1v|d69f>Qknt!9Ց(0 @<6U'Ab_ÌBdM%Uf8BE45gP ~ 錥sB淌z*Gة PϜL+ -/zb&7w]D)ֈ~I hj'Ʉޝ nCSI"[{XswͻSngg [:?ѭ:Ztd9۪lyw0hi^d.f>t{Hq>/B/ˆRiּ"6ΥLq[Sp):gGt#lnQ咡;2Rv׋4Ƃ[̥=w O=î6OZ]uc#뙁r㵙Fq?lzj&Ln5)#N}QrӲ\y0ʶp;.L Kq: Ƨ,UK_@H1@p] \G7(Czm!j%쁋9AV>{=w\Z*.!S ̟ UIa;Jh2;\/Qa,f0, O=XȆq5@3aT 4 3j0  ,x9yrz mX~%_ A0Ryz)MJ<\Z:{*O{I4E1 Ϡv{X3=U!.Q'E^dF$F69 ZvT 6o{U^H+M^,6*x(JAiv ]`M6qk]WIc?rN%ue7<J!?fBqLLj{4ƏNv'R]oM'ɿĴs_W]B!$=[{A%( T/sBJݬr{E %e{ąJ+`?l ʐ zd7g4)mǀlΑ":lRI`bSonAWh~R6$w}F:I/ä713swPM(zХ--`7hmVf Ri|FN\M>S>BK~ABk̥;S&hcG 7 ) [3!|}5቏fՅo1I:VXDi?l&uIޝ'a#'Ɣ[ ϗX9ߧ{3XkͨFANҢIITSpιÀIfX7l1A,ҙ>tpv\HZ$L+WFϩ޴R=%^`yi?] /ąA"#➄|:2I"6%27&u<8P$hqoDV6RlbܕÏ=g+{6K ƅ@Es9~O~Ǥ/l#vClSEezL3ogGHJKF-Ab]AeWQtJxqEݫnvSG4h ω:lWߕs b<:|Hj7g\ȺIqC H% )b(V@B1bxJǭi!U2}>©ZsG?Enk`!w>a[-&wwgK!o)1=.>IE^Lv !DE8udIL9ZD :Cx^G80K  - j-a WG}6joѺEpްCqp^MEmQ]a12s$.$Edeh>TY4ko1*)CfQO02fU{g{%;ham=:<Bԓ="s{u}<>dȖW-O Y maBȪ!Uڬ<$PEZQcsp2Ɣ+w9^3\d24Xo[NJUܬ+ݼ<{;1 "ݒw@>X!dVԡ V uFy'S̆3hKI`; )Z!4pFםidbWU4ҙ1D"4[Za-ogK r59V}0 n%`0MKTL>E0MSÆ/t㞞L47=m鐱EBCyOS<epSOȭc1um dt M[YWG;,R\E;yTA@]½#TI,#戉 ^};;9ei2}C̓a@"{ 2Q͹caO O~eb;"AM<DKJCz DrvP"WT-DBmb˓R֚cs'z pnԸ~pI%2< { nKq65*nH]8O3Yi d"۱鼬y|jR];ыG!'eu`0AvB׽~ ۿ_1R +XYr>]z `^W˿a'INf:28'D蓕N7%jSД/D=tB<%T&!p l54fT(\Y{o4϶ġ=~o{*{~goBt\,nbkUq҅#j}n^eCsv  \`4| Is˭r5/Jo6;xDybdp>ѡMMg~.~1P#M.`kA;ڊ( QA׊_p~oC%p91|_ /m˴bx#,o8X}YSE>E϶ݓ\O[)'vuČmb3▮[v뜮K\V8A@pT\޾|(nFʱoRm(?5P.ZEW>|1)Ŕ Uc#WD'tl4I4^i1u1XJؾ8r }\gy]zk4Hl3@GKOqIzbsTL>2وjdsYmsN>JBP >CH7pᥤGX)"r#3FGoz@5koeoNKzly#)qn\}9e%Ʈ.%#kBQsn%tt@Dnf ɡDerI|9gxҡ݅Q:fIY'侓6y؍YoNKt6Ey2(& J,=%9VePE_-Ɍ|VlVBC->΅TwayÙgB-^9w I)SķT2v'~ܽT?iJ95L%^L (( ,Z}9WmyNK"Tƛ8!/E7S6+q5ď4BPH /.T:~-JA~nV{|ue|< xQq)[,f[)v&]E0lUun59jciy{lڝPaSD)-s* u_/ jEz@X%|6[t8قp/A&tG*5ty#3lTGiYl{Qv`3&7Ww-9HE˓@!@Ku`T@%~&{fFg$Aσ[Xvơ*uEADl@z?>L $* HbV*9%$}aV,T6@hq*51X)q BWkx8{!Lt(ŒaoNYr_"SƓUjAZs.9 6!#b{%pHW1Y-T&N[:M?*H&>zVXƯ2QIY5F`7`ű#,svWbzTwN;{X:ɇT@#y <#$ {G - CJݡfޕR<۫=T4Bs+: R.ӯmF6y"4 G++ *50R, L|C؀+۩palEyTb?xÁ#T$'JJ eg@]<2v"qnedu 7LڷrG յTJ!8[f=4#}0/ 'DжCaLd:->If{eGyaxE۫bJXb }pȞ T{)6:dP&Յ a+jYU PㄴXQ,R~/(ΌK(O =Z6Ï'45S7c|C2ף3`3DϚIR4Z8s򴿕2Tdh!?֠\HݤGT=&.Ypåe|},|{߀)" o*-(P/Of] w\Zf%7>p֖i-<]?h ?Ui}̓`m==-|.~- \ڵxn" FM1bnkT2d^`UőI|5r.g F\cGO_R3{?@5%T./_+l ĮJ<.j]i!SʲcI,(ςNq /n}@@KM ] 95Nbe;G$){(kI\p_{iPDW:ܖ%M xecGHEKeU> "'ͽL<$'<.v2CR9iϘUﰑt]@t+6/\&6=ΐǫepo1hREDb?#YȘ6Ob>Qq*PDߗE\6 EA 6\`ߝq({g 9׮/K9%` nd [ #i!X Updg !zj#ZZs_8'vbQ_/h1[8Eεpv`Cj űuvGb 54oLQ!( uMg@3N) W: m{uM р)#EB]q?Eж;rusJ{1P-i%S2=s'!f|P-)K\僯 6(_Z&$)щ9sfzQ<7mT&}BCX&ca $z.\9bTW)R-gӳ !P&Œ3?[[ʻ>Du_@?N3l ^wf՟?9%^90 ֭&y xY3/xP܆`D(e%gvc6ŦΩoI#[yS ̓8O֐hWy|*>/lDWr̀/7A pԜK)4@7~?z0J/\S.]$y!:WƨyݵFx;?FLf熯W6k; jOLFSF#pܳD͓,ae6WS\41Dp^FN{F5=__俢]}zȿ<Mqz[M*_?tO.F>9Թwʥ;߂9hLǾB> S.ZRme;3[Cߋf`׽DQk>ϯ˥X1]MXv_5=5Vt:*n/r+#Upp֞<:,A)qpk\et@dVV,~?L|kWd|`G*1\h\x]/e 1/Sv1[d`1,n JC r#͓7PP껈s =tδ;3~ֺ&Ai܉(1n׬d ?e7([XA`TC -9#!cۙ5?W.9Dq%n>!c1<[ę%&(샜'+ ~4:LHdOiuFgqo0WB1N6LUpMcyt+#c ^^CР dʦ]ei Ytq=mnv[+kIֻwdycAk6#@71d@K]d>?Xp!|θݥ,@u!x6YUY{ik9gz!f=?~<*-@&B3i4bɉ9LhNHs:W5-}WGgeBBtBZ 1m4eٴXKxIUtؐ&@;܀l"RJW}g EAhtVF^5 /v=V4 Zy񠈟3ft0}zv^Y[wk.PYFPwGcH9ӒxjYRբi4hƋ{77U_wb$\cgӅY1f ", ڶ vX7#dO5n !W@t[< K. h6:؉.ekmaHhW1ʥ[Xe(,lKi7=X~  An(Һ5GǸarKGx37.N~Dx=0Hg@79W\:+@dƀI R"kWYt^`\o42wHkK#IhG18{Lڌ .ƹ\ &-kJ2/X7ӵm) _DP:wCA$Pj O=[)/ˣy0~܅֗:ͻć5n|U}Qdb߿o"\i<+9V9'U3K,.N7kk+-&%lNp/ndԩ0X)?& 6i-ׅ!̺X/'Ws*\*|8Jc R 33fIuSfrenD+:sgsz&&#k/%4#CF[4$rvxh-XzBCIC.fCiH}6bh %UG2 2EŮѶoHjӇ^xL9~:‡~ Kb{LuyY`k`Z(ODn[a"nF>Q=`J߀&C@'+w)5mݷà:TI0WQyp*iun-67PR(LLҗ[hR#Wǁy뻜.'zT_U=]*E~13!#J͛Qb7"8@.$T:~Hq{ 'B2YȠ~Nkgň6=1D: ܻ9}O R( D-IQU^;z֬x}U DF\baL ٳܗ9IT4/Y;g;#d/aT a5+ >c~! jUOF nOuֆ:;6OZ::m$k權s"5kmN -@+臧b^g'y :Qߨlڮ.d8 3m*YN:WjGam("e-C12HzC͟lH(f[ ?µص*1+TJcVQ-==w:m3l닠 ;uZ7/hUŘ1*MT.%Z·Dk6 lVm [O9]Ɵ0ppUapv]JLSWk~/=[E:EF~rrR vJ%=^sFISߌ8:A_QxnIu>}`V>= YC%Y T^*8&Pf=vBrw:=t#ŜRug+0T;^(q}WO,8 7م'vI@hO.ڭQQqc9s)R@A^Z,;yYi Oˍ쥨e-v{\7׍$Sf"kS[kJq ȴ(1!Ц M3k-{GÛfd)+N5HN׿ ҈ooy2#)xf[I"mJ0)R+44B>k?O9]M㤚+,NH4kniΕwYɉVs6*;ՐWH1g_ a8.aׁ&܅H].^, ;Z=඄I%N>Fܮã@t!=R}^%`DPVݦԞP|g;\|\?Ж\Fjd:{{")t!oQ8 USM4S|!HȘ z%jV9 Tp_A lI6x4LշtDjYF9r{c:;S.n<"kNY0Ƙa,AԪbG*t#jӝ1ylYr {L)`qhӰpas0N&q#{sh4.ѿ>P~VdAړ={ ~ֳzWxdj u3j:433^|4Pp^$M,RA.œv\oߺ }  qs0|wOJ$A$azE BN`dW?Զ-RfO}%] o?m6r'Jr >fHR洲 Ɨo2 jTl0vp8n8^_x<\?)wA=ѵ5| RFZ(Ԙ@ :};/ʣF Qu'(%s>Mjgks7Al>>x T>K__ȕ ח7fѵk51at_QY`U7Ԗj@UwNy{UY3Ӵ^I9Z@4dv ƱOE;5@Iahr$wmT/ݱp9f RY]#;E͎|nIk! =&9E-h=6#%Ѷz[huB9w<&Ư RUPgO95g*\|be|\Ҁ7/(3%`Oni ,N9p!a{3Ka򷞀X74fE e/0I7pe hUف׶sxdS8R?f H`9$,S89ddqE%XYY`ZzAKoIbYBv@$ " &0֑Wt"_ʹ=SHgB2elo/Ty>1WP`UP b0$)u[J݃:s@G[Pi}͹A/*ob[O- z<{40Y2Ul^"} S+5a!Y14mEȍD779A U ;Z` xxs(M3L~5Z:yq|CDКIwͪa_<_xy904ƍVM"M ̍fBV6ЖØ5 {G YZ