sssd-ldap-1.15.2-5.fc24$>}JsN4:Cԉ>=۲?ۢd   8  ,IOXx     4d6<66 8 < A( P8 \9 :B&GH I,X<YH\h]ֈ^bעd؛eؠfأlإtuvwڔxڴy1ۘۜCsssd-ldap1.15.25.fc24The LDAP back end of the SSSDProvides the LDAP back end that the SSSD can utilize to fetch identity data from and authenticate against an LDAP server.Y.buildvm-armv7-04.arm.fedoraproject.org_Fedora ProjectFedora ProjectGPLv3+Fedora ProjectApplications/Systemhttps://pagure.io/SSSD/sssd/linuxarmv7hlXKN"I~J@VZA큤Y.fY.vXqY.Y.Y.Y.Y.0eeb34ee024719c8aad9608c25413f3504985368cf12d4e23a31396023892f0d8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903c0814a04ce435ed1a525b459d1f3462ce4d80feda91da2a6e40a0cad4eb283aba6480763b0c94f592f37b68270761269606f99833ff32e8e8d5cc3ed29f3242aafc683cbfff71b1212d7f7444752266bb45fd3d0de115b96bc9f619cd1b65254369c24f55239f55c3464eee26bcaa2d50bd139187a2227b9c4695b2cb5e789b37e310d32544b7575a950117828bb24fc0e8d62e10b1661045eb5c34025461c4brootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsssd-1.15.2-5.fc24.src.rpmlibsss_ldap.sosssd-ldapsssd-ldap(armv7hl-32)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ld-linux-armhf.so.3ld-linux-armhf.so.3(GLIBC_2.4)libbasicobjects.so.0libc.so.6libc.so.6(GLIBC_2.4)libcollection.so.4libcom_err.so.2libdbus-1.so.3libdhash.so.1libdl.so.2libgcc_s.so.1libgcc_s.so.1(GCC_3.5)libglib-2.0.so.0libini_config.so.5libk5crypto.so.3libkeyutils.so.1libkrb5.so.3liblber-2.4.so.2libldap-2.4.so.2libldb.so.1libnspr4.solibnss3.solibnssutil3.solibpcre.so.1libplc4.solibplds4.solibpopt.so.0libpthread.so.0libref_array.so.1librt.so.1libselinux.so.1libsmime3.solibssl3.solibsss_cert.solibsss_child.solibsss_crypt.solibsss_debug.solibsss_idmap.so.0libsss_krb5_common.solibsss_ldap_common.solibsss_util.solibsystemd.so.0libtalloc.so.2libtalloc.so.2(TALLOC_2.0.2)libtdb.so.1libtevent.so.0libtevent.so.0(TEVENT_0.9.9)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)sssd-commonsssd-krb5-common3.0.4-14.6.0-14.0-15.2-11.15.2-5.fc241.15.2-5.fc24sssd1.10.0-8.beta24.13.0.1Y.@Y@X-X~@XO@X6@XOXWW@WWW5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 1.15.2-5Lukas Slebodnik - 1.15.2-3Lukas Slebodnik - 1.15.2-2Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Lukas Slebodnik - 1.15.0-1Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Lukas Slebodnik - 1.13.3-4Lukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves upstream#3382 - SSSD should use memberOf, not originalMemberOf to evaluate group membership for HBAC rules- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Backport few upstrem fixes from master - Resolves: upstream#3297 Fix issue with IPA + SELinux in containers - Resolves: upstream#3360 Do not leak selinux context on clients destruction- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Additional upstream fixes- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code)deesfruk1.15.2-5.fc241.15.2-5.fc24libsss_ldap.sosssd-ldapCOPYINGsssd-ldap.5.gzsssd-ldap.5.gzsssd-ldap.5.gzsssd-ldap.5.gzsssd-ldap.5.gz/usr/lib/sssd//usr/share/doc//usr/share/doc/sssd-ldap//usr/share/man/de/man5//usr/share/man/es/man5//usr/share/man/fr/man5//usr/share/man/man5//usr/share/man/uk/man5/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -march=armv7-a -mfpu=vfpv3-d16 -mfloat-abi=harddrpmxz2armv7hl-redhat-linux-gnueabiELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=c559c4891f4acdc06c11046b6c948900b8f2d6d4, strippeddirectoryASCII texttroff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)1PR R+R.RRR'R%R(RRRRRR RRRRRRR,R R"R-R!R#R RRRRRRRR R*R$R)R&RRRRRR RRR2utf-8?07zXZ !#,=]"k%j{}}ݱuT[YF4C%HQ { o鹿~w:Krd+"Ԓa'`N>hkKda|]Ւ6xbmMഗK_'>}#8s5ebA I"[%lLqMeD[40xe7v?T$'6i2qBҗ%k@TM~9ݕe"E?.):1-TbVN~T'-aG.3@5K1zVBĚl HWbV=BA6Z~KQrGCjZ3`qA>2p"XY3(cyzVo{,i8H_%jrwxY(+pQp5+xUL )]]bGzM{Y!e/JGW9`hxy )ߨ.8kMpk K놸na(Kˆ3)B1: ^))^Jgkyqna0HqNP%F/\ ⤴ㆡi2I{˿l\E͠G5)yV 1y<2Ӧ }z82x9[?G`w;VJ_FqP;b_ub$jRToS>n~q05Ïq@ Ks''M!C$0r5(zw ^enFJ=;-ș"xc8nvhTإXM/fk4Ix-})*U%!/v{|dirx,uo?XIZ~5kp;NT·SOei?~"5y:_)Ob#t:~|[@]͖P^u&5 8 UXQ{){ա:Hɓ@]HJ۔݈LEPVZ*8_ !i]/ &uJW:IQbr=J=c3*h>zY/{ya"ۆ4saCLc_晐WYfu`oV{poI71LLs8h)4~~*fdr :ËSF}|7T*\w4k{|>ZI*4 1ڴ$q"aVMV$fgrHF*N"՟&ɻ~6l 2;!'mZpˣp.$Բ.y|&Rr|SChA>+TWhtNmzwSy2Sa7Jp&X<1BnYLg}TrdEә[< d):d\d 2=F9(weR> >pW~ΑD[9Ó, o\ v}9~+ P2cSdg_S[]-g0]%5.Rz 岰ʝ+ң\ڃUFg㙒c}Gw0 JPx]N¬PqGָ9f?\^Bf.驰kU8{Siecͤ$p(P |[@o3eTs$q3ĀN=Ug8MO>7 {RтaYd;H3 ׺ap]ލxeQ2Qx= T8(`=+bxCG㙹6Ys=yę\(_t-gʈ ޯљB- {2ѩVW<"A-vPپ!*$_Oh)i|T@]%yA$dF=}V~T+g~kK'pq=UwWGhoꠅ[7]"ӂ<2+{f0]%v/O|^?;7*,eO#<;"- i.[{ɰ$r^w؊[Ŋ;@Ud'X?z_q_u#*bf8(л_''Ow^$ dChqpf:7UXsk{dE#u uH}_ERSU$X]JV'̈́bcc^ _usu+#Tg`N61u=o\.wnjݩ/%}C׼n46Ft Q]X3/η?1%*$'? a,=iD#OE;_ dt{PF}Cjʚk(Gx(! .%q*i4yeV _:=ٔF"<%XS@q׃ϼn0lsH +0ҟToǒXYާ 6ĉm98V|;~5eߔB0]u ( 0m݇ 16|P'j0z2Pu7IoJ:2!0 ѻ6@˲D+kQ'ZEgGG談=kr/|kqcqO|kmchxq=A^XǵqPThXE+"/ J{>1oV&{bqbM#=ah!-$fhaRSQ)sՏ/d>Q$%^djo@,(Pm,sXckHǣ9LU=)qq7&H&6椠m7W^(\'뜺]zmNݰj $uz+hc&MC'z-=v&( XC%iMG8|| -_[6 < Q_onpÓPF/&K9iWFCsЬH!o]cp gՆ x(ѝ $(liF!5Ȣ,ȾgN>#'%MLYd \0i 0ʝ4yi0S^^>a|,' z^ M4L(ў(),JY %* $ʨ9H̼8c5^wp8cSܴȭ'd66:R):$ EԿ?P I~kWK\g, 'Q/p3L+ {64 ` s/Wc#ǎ@[VQ@r-d[ fF,ux,a[ 2cXSܢ+~(HG(II E?[0T',N5ȓov: :we,~@W+'e M3xҧ ts/̈́f{-l[ُ%1CJ ^nVxPi mi[Kss6H2˻@< ɰ4qIQU;NiF^ll8zcvS{{`Mލ嵍vgRVR5o)p6iZXahF a &oA#5^a7PgCAF&j̍M}6 cc n&A`#ɏÆ#9]qѼo)stDۋKھ Lx:Hqu'i%=dURQ5kZK1KH;i$ɇ5C݉+mlAOsKɢ0Ѓ=0jr\)Hr:DJE|BB~jPI}OO vuR5/V ჟt}\6Du_,F K@ϱlY^8ݺ[6cF`uhR }MLh9R]Ҵ~Dp.Z?8uM_JQ5'8uT+r3:EӃb5F|Ow ph<85c3c`4󠚉\Qg/SF bgXfK)0%O,0D#ī<2ugZm7$qX.e )T6ԤabtO$qHXÌhUh2}p>PS7Q" Me]aL0)Se$C5ZBFޱ%l.uӺf%tmɩf't2* n}Q\?!a zc8\Ư? ӓs*\v=40?{Xo*Qͼ|XZEGQ6^t8[.x{:C-_t\nIArWa 4MbUܓF"kgzCǦ!l 0ڒx AT!"|Q.]-NQXpb>C+]w <9H ] mM>X?Co:׋_E2>/Au]_~@X^ʙvk]˾f.q<3aC-=i44X ؎en >=IWo/σ2C [Jb d,W[->ݝGa}*bqXjOrɶ{.Gd3u{tꮪBRcO87~KY6)by1Z{ !|ttq; bɀpnR#U}کZ >fQvoa|JB|&cLAkP:5P""Y:6d tlb6}oX";~=^~< u&wR)/vF$4^ә)YnWi2 ֗0XG S ޶xHIp.=p5ǖYE49I>izc_^l nHzwM¹sۍ"i'GA6^NB &HEoƪX(_6ڝPԲ'6WaWi}":ۧ@8'.r K%ibC?9o51Mox*@֪\7`RWIEIA,lAo'O99*8cO>y6=Z9^`w#~alUP h 8V H  M;V2֤} lН -.?caU<0 KR(ͫG bHlGu>GzjshېQ)BSB}Ŀu+ߺѸ+tz  ]CwQ4 \*kNQ$]#meE8U8~TXS! &Əa|芉 1^Z;cc |&wEkFF/}7J_3ɚwt-1"4*mųpse}ϖuB8BRؖgw,a̕tC$ R|\ܽPc+&33?C>H,a~Bhl , V,9o`;HdѦ;zTBq@ qҌrp q%fSqָvY5;-YEY#"1`']WS3Hg0 úrh5w'IGeQTfU\VڠeoTTL+~ϬFD $sz6E E oԋ⥗6 m-&@fL 7hjO?Iő2cy0{K{,s%i*+'7HSM1eݻ|5*oޗ۪žѫk f8C!cĺK?BLxNYc0|lVS:B^ '/XeXsG҆D_$4bU˨""m|,m"t ODInddB{= qWas?('6]~/!e8˺*x4* B &ލ>QUa'3 yɀ]MXxheM͒q?zsV|'|L#,Ö͡z[q}580 &d0e, 5Wu8|ɿCstJH|x\YG'*h{G,4u{8ј$C;O -{_Rac|(O8@4f¯f:*qTJ% 9`d ehk5V\ƞhG |h<G+x`<]YX@ʳ)Lq7iy&Ibv[ᙪ%$c ޕTl&diz2 qG`2ԠQ 2#|̓1.=^ J6.IruI$#8_[I1ƪur }xߪecWEXFޑ;jԵެC/莽.L-6P3jߜy ^P &wmKsn<$E[O.F, "APY:VsCMi a8|m% gbFT3_Oy}s'f9$Q`X^WJ+ ]< n~\B&*;f;y X9IW~WR}9º$$-14Dܛ752X,SC9%Mص{݂y H'8b-D0c'~ 5{'w3i6fq%#R3=ފ?03u~"F~m]7l*k͈+6Yuy\[YX3z9%.:ٛGOX0MwYQ,\iWB/8/H) zܺh-5bAY *9?Rvߞp b8c(}t +k`tݷCޗ'IdޕO[Dr2 oֽg0֯yg ;+*-PZW y'KnӺ="f*՛vbN^tS׈PZh,3Ԛ7Fxj웂ya;1; $%f}e.$sZJ J+ jrz8n@pضMlƦR&x-F$;Y hC $ #ƏŅ1) V=ڢo Åc 6:Aet@S0BEqyW B 0 dɣ&Lvyʑ2Av\9/J J))6q٧ )I U=@N:%&EQgQ/]|61]-!i/Ӝ_gIزhLʭ*f@ʥAn17T"N≘61|&>cyP7h6By9mq7a 87qUUv` 8?xAp{y~> ۇf s!w{o x0V\a %8(d쏂#= G^``CIj[h;j`5@|$@Bt>&Y)5ER ~ F~NRlIu>CdMvdgWT5@n}Xgt!- +i\?fWOeE+ |Ƭ:Б̏}kB<>,MITFlZZ퉨!9Y)C./9df߇;v5=lRvHa7[c2f(FfyDs}dYzRXj~4#V昽;3)5M~SFLCD\5:s`Ҹ;[5dH@ѠN|p3_,qZ(Rure]*/|_/ ˣL;dJÇhk$o6!ۣ2z epvިRV {g{Wr| @w :.P yU1EFNmMX*YrySfk۰LSS= $K!f&u"JU5}86MR\X$*Y215 c;u=7+H~4C8XOc89`%ϧ?k_%#2$PD&2n2lrvl-w5Ufu:UJvj"nwD'aݻ?2$~@MhC8ʖ6BA[?59Hlǎ}o|M@E&Z4I[ip2faE !Ȣ m8  nQ@x\8Uw6H(rZ&4YvviXI~=aԗ01 gr} N_VNMX]O2A6RQ.B@4ACHhYg6Q $!b584yk:͆w`=d)(gNm C>N ɞ\'mع h7?*1rtG఼s~ OD˨8OeUuT(`P$( :w0ҿ6%8G3V qcklPHgלC@13Cl̖簥BHs9pMz!,jfNzB@LkUJp?Q));l][~53wUWlu;3|8kkMUQl0kmFM`lOH«|x$>E-epXH0rPD5b-T^-`4DNFL/r:0̅H=6po xM\[a y咱(iDY2@+v[69 ~>WV\iSAৼ}7VPF]0F{ ݏԨbɿ&%Ag—׋d9DQ[fBS^D 4ZՏ.&wH+7Ro}ţ7Buk*_(;f&a6u!`A6I%ZۯT4V50r…ۂE>SEMtuwl׭Y,s_s@c޶^ $kfbivzi*JRח A=0Hhe$9B =%QPW,ɥl«$q?[hz8??R& DIm\[xC3Eٶ('F5{My>F/ȍZ TzI7Z-ɐMxODդ v&y'/f0Ycy "Ҟi @o [e {\v[FX}@;Xjմn:s'ǝ m7v=/K fP 5c~3G292F(`Q 1,nPoʨ`{I\d5[/)ti:BCRly/8$7a5Ka&=]*N\/)}.Y 5b4Փ0N;Ȇiʩsᾊh MN,[xZy89G~A~+ۘJ*舩s-f[$ bMXhoY-)G@d*h/0Yh 1Ze `+cyܾb/VVZ mץ|OKq#)s@Rx|l@ hL]S3c  e"%E<7KD:9~ٗ=/hwm?ңxX[a*XE4ywC_ULg]5n!!\H0svM}FD J1vuNPOF 7%\~S˩7S=CE\AǿG.L3 t3q,JS>d5artg?-QhҒ:?Lfڼ ":%&8Z( ' Jde/QҘFߠ)b[YK6P^$H:r;gs^jĤqw"R#9s]~Ԏn UUNPL] zQ63HlCIe{hkpLumәVc$bE&WlYt[)B-hu% g{WDܽ¨NI{F^z %)jo!ɩDo\q[XZ@~jj4H"||BԄ[Y-b/;Ι5K$C-#.Pk}\1cSwOEK1FV#HlN,~R*DK/'kFoՖ Y$XT%'E?Ťm ۭR+P-Kt)-sriwQ|,\J VjP^ )VY31֜el _G\J1]79yȑ}k9+`;b`I!h>C7Qx\*0EM%ED6ycreպZ`_nb`Se8f#]K^Q[}S̪@9I\H-%*F>%gU8{DiUɝoE8rCrA=w͜tCd I}oxw{75)6"Je8pl] ٣enu-YDod adpØ|9BDJԻQz\D7gqG= |3`Px֕hǛw=A<]f;?W+u \3_( *3x^'ء+MJ@PdK JB*%_D'gq%$I6=}B#b^h ֡_ @2rhg:1u[lYt$DcuK||Eo!EJ\=>:T6 ]Jfy0+ E#rD?;3;ʴ ]`u[B#!q`Ęl;Mb|e;^t/g>QH)H,A}kJ!Gf:yÜaN2PV t[hvƤuo"w7×%1 .|$溹%ooϏop& Mt"^\]-{'!m{LKc).7kiU1c?\N`O-lrҿ\ZKN/}_^twd#Ҳ[ C]@tJ$$&BLJ[xP)}ǖw7\%Z24ca"a#U dםlinht$7f )-~1hACMMSL^[TK7ggi!E0A XސA]~`@t!pK.=)KPjRH4 +]1&HzwE߈C:3!P >gsi$_2[,t Je}и%Uz [R !b CÝYm YpfbZ~KU,-m(ewR+ACfnSȧ"K n2[ģ g>J v #8 pyh`HDחyz }nPYD<2q$^v0A%P9-o <"@ݬd<3cU1s؟r-ѯ/b k_-e~Q}|y/9#~莫n lL_aI Xe,s!:GlF:DîN{a󩘡YR7…X.Uf{byXz,}ljIyׯlNn/9R@2Hph:l+Ra;DwgW`=B@BjJ=#CV-_9KsZ=5=3W0R#\F͉ =1ك`.d^F:TRm_+duշqR.Mv~NL!`s0DSו2@1E:Z+_KsqE Vҩ%0sܩKNL; QiLMD?7̓v \en_1ῒtI|0lے=0 {|4>VuM G -Iޮq^+K01X ~]f}xY΂B2%`@nz2x7+490504,4+\tB͓vq}jxU)9&3l$J;5_|яcC<Y)z"E6; 3 nePPSVOBd_ _ 'b?Ϯ3H`{Z.x]n^=k<>6Rvg){ᬐk,Ѹ&&'jTtlKM}%39"Ԭ/9M8kϕ\O,0ԯx,m0ͤTf~[DCpx e [ؑH=j*\fU]kE9myN4"zcp1I^!8܁Ao*㙐ĥz=D2Lty0șo5݉І$t9i{瓝ݻXEܱ .T8C(_wyKx"׹a Oo NXw_z` GZ̗3v- +-bu?T`#)]!Tae`@%wzVg#[E)/V N72ܒ|Nޠ(d1{='?Lއq/Fpt>rbtnrm$+uiq"(M xJrCSF- r[**ʻP{DƢpPv2oqlts$ZBIZ_S>Ph~56Ļ8_lU|l-ysLB14b HOSЃ%|$!l]㐬C TJ.7H@+϶`"Ơ!urZp=KNHuYIIDo2yC [5UR*vLR ? Aێ9~bnk]%dxsʥ >dNQ?F`2D#*].kٱNs¶2viF)d}]JhuR M[x n*BT*)(ϳU'@j( o`iBA~ŵ ٷf@o-/`JGi>Rg}ˑ)@p(ΎɗyIj4"6+<,^I!q} '0 ݘٙgjrLo?}Q1qG%R+zݍM jIԯ/=hxO#gзjײ*=/cgyqt'# g7[(,kShE0YWv^|7hз$I;׏VX̂$o^? 8Jpx%% ۞۳;m]NDy~ NkkNX<6ʠy˜`[2Zqwrbyv`BR٨kynSzCI KrN :U[Cdqo:CH [zu;\l#y۫wL顎L:BfBAƣ!17ZK+1c_v:JYmW&ޒj=6p; Lp* G2u5 kx}I^z^w{>r\Kkt t|M&To ;\:g2w> 4o~ H:Q5U,ufAhE|Bn$9? QύqlQY_`WnфO 5v&1RZPLFT 2)5虘7 "#0M]dHp{ƷDlZbYM=ƺK얉ap02΄zp~)R |EJhjrYR}⥗f2NIslߝ$|wLJ&.0pNϛ货PQJvK\$]o{M5.3Tbl~K.=6] "gyb[aJCzw CWHn`>Bh.^w~ݸoj@_ gN ʶZNI j&dJAxV#f s\}V˃ƶ.lUΑZ2#DB ,[lө.*m!VyfМyL`; + <؉"F.+<-D,(*iu Ë~= |_IY@@d$S)zxA15PE|eБE?^آL+D_BkjF vᓮ1$ %eLr$nc݆?YʭbD*^|z~5ce#$|M:6(*:5TLp X?US<aGAo_EX>B_N)g.e@N}?» AuaxQ=j*T\/Oˇ>ʠϲE@%5H6jK,!Jca|m1◡|G E>鏇ݟvb5{\w:9~F_Z;vcGn XSqpNQ2x'_JZ'bտfMD>m:~g6[FZ13{&KWX`VQ-e%ewVu4̹NnkSLA i-3*{k'm"/abqY GF=墈"NpXfDxE\2T @ u?& ➐(^67 -"r$NV^rK'>Hpջ'혉y6'Xs}= Hz9{zH`Z[K;r+ Kș:sʕBʻ@]{^^U dUy[DYN?ºE`)sD[5ߧ;n+>EG_;6 &8nY7Zc*7gW0.4+:6Csao)=5hl@sjݻw =P7יf b@[zj$m)4Џ72*˼C\.ڕc]i9!rݴI/9b,-:k9a5,ywaL߻0@e}\jk ^x E NܷKinXʃ͋pljW9/HŠ^A,Z(yMjCbd-RP+?_YU'na'N6um4j3cqZSklT9{I5RhƿZ`pJAIe}'!?X/1r]1*+xA!KΟ #Du;-_`^Ƕݖ}4ƞ/k=1;D sn/-p*֊5L"@˓HQ_t{M#|)}YjD\yAx2yo ۺn?0t*,(m\[ Ύ1s#Tp 椓WP/gE=FD׶%x9Gn!8^䞼6"z⑔gO=Ox.{,;:e+?X ȯ1'c"(-||R2Q+qAc|.n8"!C?(B;$"ǻEԜ@dȺ7 [.D{O/o=7AΊss{@$^ ۴XٴC!SZ[>"q\2}~/V=Q0שl"gx jS^GAM+r_!e ~6oGQT&Ȃ;ֿү^DnS'ƪ>GV!#NتSˆjcZ|4 Y̶9ޡ'{\ro6J`TVDߌrK`PF/2`Lvi'v2ދeYZhzp %A:#,FGkEkOGxnD3ڹ?`j $@ (/^ ?1xdJ+;SVJrnIķl"CO_-yi)*Ggs=ǵXw(DFDy 8Y!sU:WCzF5sFbbo[>^j?j >uQeҪ=60b.n*9ӣ>>瘪DJaqF _ŀq:Ș땒T$0i{ Rg홗ނ)DA#ןn>vՍs*q;R)>~hd$vkA,Ԕvl,Z|&@JZOTvNjTpF|i?>1K3N!@`8pnaL%迺uZNړ3h캱˴+ 쐢CsdS P\0B;ƒwQ:0 ~bV mҨZ ;":~s"@<6VߎD.z)`TBͭS;N*LQ~yP!ZMD)ršb\xr m voz͔x:qgc`k4xQfPcԊzt x3ZO&GFZUʩLjQ h$Iw& x|)K鶲J DdVeHԓEi،6Lݥ:@Uo)l("D u uGI7AVU~,ٓqkaZ|QQVIYdS M2/tr퀮g ԙpSخuo\#G1J0-e B^gH :!&wPy? "|bg9Or0ga2 Edar*oo*kgNx^+ JE֦I-ǐ4Cat&p#|Lnλ'!E`߻94oa9F7:o&dcub _.nG鳬 ^ir|$h cdL׵Ғ(9]S 1uzWA[P n֯ia vp|oh\]{s%:G=-+VKeW[m,'9V"ֽcdCS@/饫i*!m׶eOVTv YuȌcУoC{5)#}i5obKdб:'<ۦNieriU,5Xnj~hZrRՅgD>_TAiš[e^ݜS4SA%n82ڣJNSlz3m.lZK&ݪI{HcPcτr4 v-D,[yd{CP{QίCZFXLx|' zԬEUx Ҝ1Ffs^DNk0ЗNגҨ{ _Yp(m =?wXB6^ 7h*[2ʼn[6 Rd^Z!CTd?q}שFjO4$ Mŭ>q X(PXcO%ɤ61Κ` /?5*f +'>Μ :D,xFG~@U H٧RKǭ9bwQdxcӋݼ'X3X[G^ qSME=Rz$3WDTέ ) 9=h{, OaU23[Km Dӛ!@6W&)%6/At`X|hA.U?ڎwJm?|^n0&BK6T.,&7Hcv$W}vF9l>OqD_Ѱ@lܟ*?,BN3%*=8BON}QyOJ+ 0$eE -=42dMQ_#'nql9}T#ŭ> w4n pЍg*.h/f 2&ѱ/_F (@@pQˉkCۋC^()Ń<20Y ڊ}?9]{^+߉Tc]=Gaf4urK/'-U @INml+um=#:;c+j1(f3`#%ANk} z|cRJ1܋>S5;BeNYsDpU)'Ô/X,jlePB̗0UWYKH V_&?ذSBV&vrr9Y:jzvhLS-|ypW9 =B7gn5NXvҺ)Kò>S`ڛU+=2\L嘝X]k-%xZߘ(ɿTcEn%G6Y;h5;(F;#uD JE2([mq3hf~ݸ8#M-rzRDtóZ~:!GT^)ĦpbAK8+ Kf 0H[^ʶYOIxgAf|Eh!ݞ̥S j#d琐4jx_\= Y|z*'+sfawl辤2Q*GZ4s@?%]quHwj+vWe 5:E9b"^d+]UqJ*-KiUq?anq'hLFuk'[1".m)uWoyk~hM߅18ig]Hu??)MS". %Fvh#^j(cE5,eACҧRRS$31 }F/[G .ڪ!`E'DF(IZajVth Vp|=fxґ ɧnuqBN%3ѩ.d%#~.Pqюi]P Ǧr([.q_#VjަWʽnj+λ.rz\)<eO-^9KY0KcZmז]xƭgţ!9~?t ]ݍN\Q[l@+%+L)3-/yZy[]g Fd ![ r>gy L ig/mOttb@AR ?B| : pstG^٩fr0AZpͬ_K߮'Gv`N(?Q~L$tʡI1#wExe ;hmT!5WϷURM38H&1Yq7hHa~hjԡ+#2võcߩ!% a,`l$QXI Β$Zzkb1csL4:!I#LEYLRA ʮ~R!0}k@GeRP!v5%׶ ,Kɭ\-Z /^0W'`Z2M.Dx BDE5nG3U(kY^sI4i\5}*1}.K8q1HUģݫ2|A93)yѰ5ëDѨMyb"\"^4uvW7e 9(1EXK:{ͭ)1blEj)ɪE,0׼!D~]MݍLfuG/\ۺ`2| z=qe@)z{^V [n_,z6UuR:VFd@MO${}|Pf7f`Z1W#̢<%y}i;jy+Qw_rP#-)7 ō|gZ/X;Xsgv މ( 7һ x!%cioIrk s}RI; [1!Оүh>"wT<N[RI{L~l%=2=MV4Or8S2o׫Px7=*>Vܠ===xbg*8Z5yL 7?/q}nzOs/ t˶lxĂҜ+"8N%eCC H몈\1E'< % ~8ٝP8 ӡKD]v=6`˹|姨}*tnw (ri[Cv /׊XsAC\닧MC~ /wT5A@gBAч0NO sswѢ^ʋlqWآdBcys,Zޯ+-Հ)N`|~*>J*hS>ڨHdA zRDz/?.Wl)37[,hl@3}VdkV{"܍lVO?J.ƶUJrv{E Y7ׯ ^ ESMQV']=n xN8MKCY{%Q{mD|lng6Ήcbwe H) گٺn2JvI0?| Ya~d1?]8I*s dbX\a"QY8M](eOTZAGXGk\t7В^I0i f[QY#ӭ8;{"#g%YoգoqA]fc)֝Py劋baB=g-}??,$Jlw&Tqp+."`*#&;NN"ثABCO5/yR{a!cOa\f. 5Ax7ϩb;hcQ2ze3)ꅇ+c~wܥs{Cx0b0ԕR[z5}KcB_\PK”۠< n?l.:8E_|0U\b{i_Gt B2&@eepy6yfX&lj0b9-ės!t<O3MB{?Ƅޱ}`H@/$ 3H{F| !WJ;ag|1iv9w[_Ő[tAL${l 4G ?D!هϛDgFz#IͶKV$SiͮK4">g&ưIz!rĝqGGf, GYCi}kiV@ƵP7h&q` W#f$by-)b~ Nv-:Am92º uX;-bB/j[Щ*#RJ{ 4" qy Q,3PNKGo&_Xu>LKD UgA%SK~zSbu8KrP1A"cs`ԻW N*QmHw]ۼX^EB3%׿ۉכLL¢tz.2s\Ȍ~>5L/abjh]wv!\1fjmbKc##$K꯼GuM!ٽ;`(D.[1E^O5JQJ7h IwsY!ݓ'ͷ9 :1뤏'M2{W\HR_qj4b@'6⾿ V#z+Jb| T3$ Ws )D}\G`?톜K8% A"4*:B a+DIQ\Dr6}N9F4?!'{IC,o*7 2f/ 4Jԇ:^Tbz; mM`c<&Ԓ\zDDtݿqy/c8ra14E%W(M"o{c#nյoZۨK=8M{6DHO#+s cHG+,?aAjb\x08vR .۽1*{s RZr+!ϋǜ[sk,a#<(J لv.ŀf.xڅ#9aqC?9dzOYj Y49cm|w]Ǒzj ߨEfO.jR8ޏe dϞNQxZA27!D%n6z=VS C vh ʓ/YQܓOkvR*sOo*>^t,_l|$Nxv#n3L1'`4CZъbq1xS 0n͕ږnn%D,vЎ^ BMttg:\'q- Zlre uF"#gzH6 $'Ro+Lk~9֒r=P" sthcS:~繆-ū ˰<#Nq*1 %޽~k[6o&Ottbٖ3Uxä$=F9Igl^q Y\-/FgyQ@ʆMAN4dHP|S%ZE66 o%a]A7f}9CJ\dKƪ CE_yԈ`/la /Iy65'&T^xe:fճˁnߨ.v& o!Aj *- 0g` ,3frB^m!BHIW6.jH@ L!{PDQɬ-[tmz&c $\\E6#;kE\1~B@E}ߠ੆LכgՓ;<.ӿ4 |Jq0"DI/L?B{Tkۙ8~m&G/;|.rhQR~ jͭEF(caCU@X`ȐA:)teXI<߫սr. [?e"?~Ky/#X!m"DnvvWQȩ|zձe7~LLYq))H /Y~Zf$˫?xIcےL_Щ@UX6) zxXT:ۆ)T6%/1q࣑R h0P#a>gs .: LL~cs&bCm0kāGg=5YBިg/y]˫T% $/Z çmt}䣩n0#nH#jZӾh5JA9bt>v>,&tόK}ÚS=NqnK}`$lteJ==nnh "jXy`uY6uWD39z )(P0 t;`=eo7yqi` I;{DNVEPfk-wn:鹠`>ť]瓱Su6 vEV4A9ԣS@lbK!mmY^AY湘òKGzh,Ғ3ň^n)%dR2xvF0nW'ܽyݘA"?xZx^˯b4 Ej~q_'ld!]5pkǧs%nuxbq>a˽ʖШʲ6t?ڣI2ϓ@E-᷻Nx 3I3SXF@|k4W%ՔnIYBWl>k;--ThR }/R%=vrUA'cs]Lp[Q{ hkQ Kܵŀ2pJɃb#ET{~hGϗM/F}|E_Vt&3RdTR?)RM#n\d76epׅ3 VR'KYi\!<FQ!3*m`ݗ͞dqUAU`sH;f mޠJY&Y\pK|e'{Z{޾) ib[ FD%<+Siљzn$yPW&Y%YO ZqN]-މ e|̄  AxWt>Ϯ^7S}i7QWR}b2S6RωֿOq>ޛVAeB v 7k;,c--zhYnm7$ XF\#:tCˣ;ERzj'{?0]eBMN}u׎Z$msLmSVά[Y/ިym84Н@?o֒5f?X❜[JˑèDo{u4gÇ0oe$k5CߐVx#X䜾y&:.vY)F+p"(ʚ|+:Uqjp̦[r{b%6cfJvET")qXOHktokKD,IEXky% c. uv'"UEd#x3hCx؋Ϣ Ux11֚|P:^٤ Y.p^JEѺ, .TV_7_m[A_r)SY5וwl-U4\͑CiZXIсwc>{ey1Wll>,`o7A%MMT݃:?RN|S.Ҵ q~vA5rn؄:y#|j`ƕcQ4 ?!1= t4h:]s٬M>HE+WYvzkXx!$ {4Kق!)Y < Z?k%6!,/W<՘FM_ SW)F+2l^DqJC= rF!$(8H1Lul Pnj\D:g#Is\hOԂO!c{92- 3\o(w&lƱ;A66`P`D5&, P6ѕf}z&9;FiUR)x 5v@; 2H B : =,PgPk&/Fw1JC#r=u>^1N'(Wk;pW*3|v34iI4P(Ps')ǁM|'4əL_إ˲_螧pȀG쟷xxX-S̅p'*tN]Ae=m\Ms1RECq!EAUa;"ڇiG$W2z-?bߛ =,n~Zٛ4嗭?*`)Oϒ ʔ-:2a&K`KLg b=o8˵kbujQ2=~'4N]aK4|qD0ӻ1-ʿ ՠw/ԩ%@#ޭkW ?`^?~ù.eb"MX7YVz_&G0'4|F ۟CD8=25ſݢ:(0 9qyuG V70Cj<9Op+*$x֚͹I1cM,2`NZj"bb䩇^&V{6*LFr !oy΀NLы>0D_&xPO>k÷!b^K Bv{y&o.x!4w3xe?;xsZ9匹` YPXQfL+E2z܇(6OO6 򊙩d%xz<L#2tm$ f(뱒,aǕa /-uHq6s<(T"K={6L&]C zֿYagB]&e#-22; #h,a/`!^rJ6}fk2W1/Kyúm-#'+ea]?| HX$JD)}u=2{=Qt跖wc'a#K (iAӁHcSt?̦j|~(+˄Z~wݔuꃥ|Dp4Zf_`/|;KšP/FULǭ0 Ծ4˽Uq?C~JB8gF hZNd祜^i&iMPNXsq^d337gj6y[t.` L˦A}Եw?ֶoO{LGue7EP|`Va97[nz z c+{S -|vH ` +Cs3yAhو90\Qocw̢*ʑy7^& CJDUZ>\-ī( EIX>~ fyCJFnʌc/daI֭riw9z&^NUr;h. 9feU&?'pnw;1KE^r=4.d3> s&_ԓZ\,OΪIi+lӐ =r%7?y+&M(4\ FHWfYUc%Iy7DVG5s3&$,< $M!3Z- vxY¹hVY6l)WjFPnB"e|]|K$ S6QQKTָ+ 4gEtb*ou^R.aFytXU]GpU0P$RT.?KGps;&,7I5|h˩#T$jHEG}a|J9yyAe5~e|{Jk@zj{1T;k^{t1,oK0:a+JռӄotKJ` %GGsx1kke+_Gf5:{ikogw+#$zaS&^l$>0s>8? pN*^Wc)ZdMLMEKtMI>3J-`aoqS#F|kכ^N$ _VT9d # ܢRT&]L `0|vՊ^،Ya01^!w`-;ꆌ~QI+Ԋ kQaR˯5<K~V/k%S6x'ޙX4*lO$hOc7 Kl Z1VG,ˁ=ݗ!yy=)@R͜X_+R x,.^GzvBUɷ:`6g~>ٺe ҷ`9,hTGMkw ;##r7Gda?q1ѯoP, Pͬ-$`] P3 -A5#f7)9}oSGV^䍳ZFEB{ rz 6Y] TQhmW F-3/_V/4\gXė'OW4#(6#ٞ0`o4vpor+jX.8^}YGrn'Vl kwG'Jk{_Ot3v.^/Z@q_߀`e".{}7E:S&:E<Hwc)bã ΰgFuhAݎG}ϝvめ|;b6Ԙh*aDS9eg8gy-˶xPm1+o[myŊRwEv |XD2SEBQk9f/) <Э,FC%pvo`Yi7&$gL\yz BzQ!b% ;puA$؋ڨHdgS0GMRĄ-:X@2L*) K8J^يę~~z"<3@+A䀖-Z=l&]e*C_/bſA~#)ћyRr7ͧpNoq=?ǵ-|<[+Y v̓S>LLjy}߃^vϡecn 86\+Ycws{8l>_ aw,'B۹IGHu!UWVoy`M;ɮjJ*janPOa݄ꡡ:i4> (XñIˤl7Jb7J4tJzF3h싰F}ic|%ZrI*KhN~ G E u  *%=tE$4t&"YXNUFuye44CKh*ToQ^sV> kˣyg4g VCUnBL*UpL.F~M\k>Ad M:H| "J[H"i!:/<Vfj4L>|R; ѻv.QҸȃnVI2qbu9<8,$+zht iLn$S_Lj? +AjӝL @Zh!\(?o ׍™'إG}[\j.`ğX?P 6nJǷp-⚐圓bכ(j˵ MG5YT_}n- .$tz+OĥwV)^F Hgtqx^{sVDHĦK|$0jPh~(s/9iw ̟*/#SFba`3ˑ7֧)&(|_q: /rs&S:gFn_A訥f(m>p=3W-Nc`]yyC#+C~QCq?[hM,>apI *:3b|ic0nh΅?D_ZhȀ.NH~RXࠀͩFh|%Sv$l*o%') xvZ{b(ŬWH_.uDB6[7>fg5x%[n "KNnww!B{IξtGK K}^ ޫhۘ׋5J֏mێ^-,-ӂo6Aw,x,vtxI Ik7oc1챗g<`S0`9L'K>݋Zk[*_",.#e/D-JL;l߮y(vkKpFk*de幠aɇK󐗩Mtx75uĩ6kVW/Ď:?୻*}(sdT/Wnn39ԕCICrn, {`U`唔zM_okxՎ8Ĺ߱ۮv9^ N1z8_ ԄzR߷38vES|b:9C&LӉ9cPg'I{%a!/* @IZ슥S"<L&w/eޣnt@`LflE%m? jM~%#\{~u6U:Vˣ}n'pxuUB"51EӉR០ geƶ6ݒj rȇnsY!SމNNYuIwe6Z8K+60id#|]^wœN=ska@Cuj ƭ+nRg npjw2/~p'4 TP*>y ޏܐ }YBtD1Y3ô>ʅZy=i:DNΔ,&~nɜ{Ffh؛UɍoG3 +D iG'jKq V)1; Օ K /OBVx<ƨ=(!8qf#YFWQmA9|!X\y:duP~c( q+@9]:eP}*NO`wF*P5F8±UQbw#zi)S~`ڣ`|4(fY`vE&H"~Q֭g:"H*2/sJѣzտUsñ,=!oKuVB\@ubLtM{e.O~O 4 ?Ia&}78,{½ܛ]Yxfʷ-pltcO:N .x5Hl6~A7mR!""M;CB8%ؘ̼ka5p t5~0f`WnX;WC%>1TƟׂuQXUkM!$͐?c6lWAq(+f^ݍQcq! 9+Q*^B"%թlTy^*VeRYݖz)Wxɟh6j684{H7Uq'JOtoEQ[2E|Ao k!|`'fJ&+ADIqjneˢl DG{ڻl1_·j.75y$tqa PtuϜG+0HZսg.+B)kak ^ΦV.%`rᜁ^+[M۞Qq1l1ljnB^Dpna`9kav~=ޘeu]슰zBZŋ/sIO7;!k۪B zL2@kɩdEjMٯ&64R!TدϹZ 'b{h$k%` ˏؔ%ipj!`J]š#Rߕw|zPG% v"E`UM.MR:~/T]r%$ OP~ ?JHQUKts_= AFH֐ OZ1\]z ?|A\Љ+}NDfUp:C`^,.Fhuyh@/In--:m@J-T 1vL_xp֭^]Nwh:)S dV3ÖTAb\[CMY" :c2;JTQ'G`JN|MZF3RPaX I{6ji/қu7d( j[^]v#FAɋ^ RD Oe*j˷;[Ru#"$M\8gˡ}d>:O1"gSZ`IN{?|:ЍG,/Mڌ(}R2W,,6A~<6\澩ݞc9?4:`\xT Cͫ@j0*t53>M!f " @* LjT@d+ +iLl/+̥P0\iUT@}gg rBqe^M;dfO zĖO^zLg-M%]0{I {KZHk,&]?ɰh͐_f[V XVesRQRn=EQ79Vb_礼d8B¦sdɐѿGhr3V3 VCY}ϱ⥣UI𛭇%.!%F|(c{rue[p LcLVO!QLZ0?{ş0 "m<NC a g,3h*Kt$5*-DLjev2EVTޥQ {-婺XQ$CС`b1 I6+$3%I dU {C!m3evRl%{?)lhp D2l{7.62JduVH+F/\m5xm$:Y7 @f#MgUmoO"LEPfw>+ UJ2c_ikX@eN/mHV2-5Yi.^` ;7#Z]V<-q򉴫,6b97hjnNr1>Ѭ"wH igoIbXֿs$lBR3rg H.xPP"[JF4d0sZRWmH1$]~|A?z|)bc'UQkMHλ&aS3`S8Vuu;2 G0F.arra=\҃Bc4=.h冉W. G $|7ȩ7go2sv:Z퟽+班@tڷ9 A,^d}q"4Y!3ꉉ."}?e0S2/8}{/'4,DUs7Ek CIhAe=OX֛8UC&z4l"?ћVh>u!qP/6缼l?^[c ec=Xkʟ 7Aqy}گ!2v9~ BQגI)(.~% Kia$>xE3j "XJ㡔xts?O&Q(gXxAdA5%m@'wf 'L> eioi748)p6%i&M̏M9dHhdbp6n^8# Q;U~m(K˒6Qb]}mYLsw0h |f?=~cC6AKZb|KOë^dQO˂yΌZ_l큏> s&l)5{Td39H}~)H?A Fa# p0LSclhk|^ 4N]d"QPsx!Q{lN'Dg{Ԗ }hk9 g s]г%>b}C>whn1w+?}G怪'n9F!®uj(b>e۶gqnY8=4:,?mlQI[]w {ĤXբZbcfAL`)~M_GeZܒ|osk&ȱA2R8n=gI܋ _dlf} Tq5h{-g!X))i,hDؕd\J_t` ui/5.Fik޻6^s}s_t0?fq.p/ܔAޢ*̣] ']h9񽶣G~l4- vٷ-ݫhrz)r3G~zvNТbPcc rѻFH ɇbuJ >'Y0&v&~<35B`A7W?4Ո ?`]MaL,VύHj*Pjfpx 9˧m.r;"'?y"Xhs_vI%=ݹ$kD"a4]sdbFV r±/[Ba5d#t*:yS$UKJm5FŗglQ󄶝ќ N'ҵ{SexK@o9둫`9 |]D!4e9xs@h2Cn%K'm.Rٲ6h+'u֧[HF)ЁAR:Q20)Dawg|f>Y6MY6Ht/(<I! հ˶٨)+q#uJψ#VElC>ys|@YW! J22}8C/LE~YiO6A|"27guS|k LNaz\&nMɃDH{4Gϧ5)B?~aVt/eI'~%~}#肕^o2ށ P$.f{z O|5t'$OaBO@4O }zkq})-K/c; |TKW+96XI`YrL5gzu/Rl<V}IBCS.O VO4.8x]F0ھbw101lNW1LyrS|!]WHH?CK}Կ6}u+ِZmgŸG33שq[|X] wqۢW[؎Pf_Zv&0Ȯˠzԟl8/ dj +@+%R}w(߽ K8(*4icUǞ|CK/#)*Sm xuqd2 "vUۆ o D\=YM{O$r矒rBLK+TdM-뿌I.ܴeh/#I1^~TnGju͜4]סuUU3YzWq6%ma§/! :'u+zy|ZO8O]Q}&" /QO[ޖtMLx; yb`iލЋ3Ȋ9ԐROɄh_3"8 4Z #Ԝ%L𯮸ۦgxkZL;!':y-@09 HE E|,7z`zc*MWr]ŹئZC@U z 7&γ.D c=X |g: *_hЈoW*ԕ@iյ5z&@ZM2AmrϟEg`_Hi_;o 12,]TbPhC9+?=@gaAs} %2 zc:l zri9dNQcA?)Ydzp:5FeK@RTX*88ěQ*?[ L]4NSX%;6 c` BXg?"&^%h . vqH*Rc4!:_LkNqYL9Nd8NХ$9? #?>1;nH/Fo ,˗kxyE:_ꇀ\}|ϓ! ` !.WOj^)gRsXv;1FCHl)qXLuGELA4 x+a` ma"Iѥ++#ta^~Zb(o!<* $mA[QYtIfcU"'llV=Ȱxz1>hTg1"Azkxʠ +W(Y,vH2ZƣkáL{pBc7f<wt<2Զ-Gu!/Jv6#5RG8)#RFLTYHTEҶuu@0vS=ˑh) -(;8p$S ,.iVSƆ"ϻ P9wv.!7xE ?\'mʢѵUr d9ё{C~:3!eoV&f heyѤ-|`ФBw8q%;bȯg&Z2I4qԵ'?_ |[fT\-DyB44qQZ- I7D^h#dQ9׫!=]s@/0.;Co|D#m]_CQ6٭G;;3zVG+9د78 6)B~gT=s+fqt]9صQt"K³o* ~oG0]Cu,H6:.z4Z@]2o.Z1Np}%ɶr#9e٪x۞ "gzqH.R0!P[G,`]Ba^ZԹ,]R3JG Vn !$: -*R[YQre}l7CvW๒`74;Io:29B&o糫y<:?_ύ(*z bZ -jfv(ҳƮR/.@WR˜]2Pp%M2h$AX)&.ґ`^70cdCbɅn5oRb Hj_\I'`[KzgH[syyG+n&"r }UG Nmi>T sۉ**=4 $ۉel׾W(G/*u(2x$FݾK4ދN" 1w4(y±Hs+]rԆܬGSCa#;v3uN$KRѵ2 3JG~} &w[s|nvFmQd$e1s|.3ǰ!^@עuӪ6{1T7wWJtMApY"PF 'gDUrotXcԽ9ĶknV<ꭌ|4"~i/̃2dJbp931L1&{㎻H2M o LYF!w*ZJ{X9͂M>Ysb{z7}ܸlX ! ~x j+h>| ?T jjooA%?j;ju;_mv0H{am\/TLßZ1PhflG0bu1U> r}{C8rGĴMo gF-P486SHm2ui,Aix6=%SdL[uC 4g9Qiw3͗& O#:]?NRVIZyT~TZbey=&RiwbsGٽ0QHlLkG^Pbd B#^XC #bcłj7 1tPK`BCp"QDWy-hM@ 4nHB  6cݘHmA$?%=#Umf̕ `:PX񙧒Kr!sTo[Il hAGbVw}&˪Ļo ڇÿcpŮ<Rܟ8678V?z4wR\ ;"YKZ1O@Ò4MHkL_$T,Mdc)!D<~L4d =~?zr{ݫx\opwP⌃Rl# D>" swޣk_OW2d1%WW|lQmr5k< J$I%]5MAfMouFƒE7if/JI}1\i~ŭBUIhe}:Ts-2v?6 Эk0sIZucR?nMkVݻ/Sd ]J*/[k'1ļa}RİELԮQb+65KniuNuP50/~Uzz}?yIʖ` ı|N0~M=| uW`.AfC=|Jcq'_"<+=JK7 ŰrePOrzIIR2ԗ]*шę$=eCvЁߑnlYbSԹ/KNBȢ7?[$W`Do6p;4't~lIL3f]o <ߜ2i5[nXZFy9m<]&tԂ*?!dSKMl MN09Tah| QSb^ҁrQbT(aKME6WQV;c{.G{w?e@' ;$8:>vso09 *Gkr5r=0* O(]K+wYp5dr1qDv[61=aWitRXٙHD|Fΰx7y/7 Jr}^_e%MԂC?i`TlԖε:그'nH} (#ߔ lBc\ق/Ql [If";s\(~<h횿=vQ#g"H'6_(xb :cO`ϑ ]^44 ^ȱ4ÎW1 ,MeAqiƖ&5> qU.>A LK )\GJU:>dZXfeFWiAFւ->_޶h?>>hO{T]yÈ1fDoU*{d~I@IhFѐ|3kdb"KT 2u*ƆwgXPP8OKVJ- s1:n1rə^9r-u)i򒐶'OZ_ w ,{C7L8I>x*q6MdvՑ(1͊=!| xvHu;*ykfK+yySd ie^rI ;{ڡjoNcZ+މȳK w"@^L[<+J&ðԠ4W^(򛗘I&[qy5nrnz /btXX,8ѼDr }W   :0Ki\y8fL>ʧ¯Yi+S'ԋh8 4Rx}8:eZOz$`IX̧[${pHXʳQc(ы\wO>=]D#8J05ˍHՓ*87 aRFB@wFg_yți|$,ЧAXƖKf/2%ƙ s)AvW#\ӂ3r ӟK\fs %@}lIxb&0u}nip;,$E6_A v-ЕeYC"_8M,G 蘦3X/ h,&_T-e 6`ݵn%KFspK~7.0kkjQu(Mĝ J]n0h-VU#RCZcA_Ax Tpˏr>1s^YN?/g;0o t6\J5Ͱg@lӼt|c7`dA!LI%囸ǻ'aǸ־k%s@v(Zr涁rIƆ-&ۊ4h !7KU㝋0 Vt=ív.i= pgxBa Ў? \Q PELZ`XힼGmz4]FuT+'jL̖HE潕)bc^H[&I3r[4qb'im3O΀y{i ,b;Cq~_Ʃ )=]< Ro-/ȧXœ1,0[ QaπhDEѦ9=Hž. J63p6ucd7*,`t(6a&:|ᝈ{驃m8hgtt>Ł9FYt7ȼyzKdGWz@ҽo=" .ԁlר/wZ7hۚm}f[ pjl/ͯ.t0S<|v5zzi蒮8ѕJP≱/^*q+CF53? *;GsX9*p@Uoj0bʄr~IrLr7SLeMtT.MtiV<h7?JVq_#/v8b)^~( e7C@_Uĝ? }2 @hϾ$N{Wl"mE|v̠yn4u>+,GRBflEvɲ /k ,Ej89X_a>ĞGCe,Y|R.Mx]f)y8JX#ns#P![2SRO|\mw|zbaciϫS, V׫&fK-O=aS yƭVGLoDɎPɑ9ϰTܤE8%=ET 䟜as0Ug!R>?"Q%ﲑtzVy?Uh/WzԚO3 "L/ũT򙤔F q3r(~>LKnӧd bA]08nz}9Y2z<䶟!/k؅K0y ix 'D:{'M*9$j§\߭/$w @})!Q\9zfo[s1k}!3=Ȓ߷ik.`i;9n{&}Y mLOL6SG BBhKkI,j@J :՛2$<\G|L5:(zT}?}S"hR/QSU"OCSLN߅5gLpp]V)38:&a%KFߟ E1،Ss6BC{: +ЛyK;Ȋ|?CO.{! Bc"%[zNl`ޔkɣs r0zS#&cHgt8\邳'_ʊW.KB'TBPӞ@>=MbzWΒϦW];S5b,fǀZH߆}lMʈee構b%n,VFE/9n85U/uش^ 1]tӧ3kJ P|2?pu8L[ у14w.>Hك`{> *+s}FNK|^msQqބ+ACNªz&jW + *NsNru-[p#k]hGSvmk8nb33ZWv%r1SChvz2o82"Ӆ,!Lp#j~]5Zhս29ۊM fz9AJ <ٺ~&ǐ* ͢eeIJZ3`_R:Mdks"5PFnUq(_7#<r&^RT1_6{F RTHFD2W.,Myd_x& gB atɥ2pUsyRpC:HM'l v?ҟvEL ҿ#˼Nlʗ&*K꬚DGmgЉ&&D x1E y3hs 2ߺ\@5wd5# yuʼn63X^Iv(xۜ_UF PF9o[<erXܺzம+)Gdk ;2/7m)LǢK QA9UH熱/vi BzucL4 `,LHP}Nz@—ᮖ;^q#P) ѓH80DiR9!FѲnfH Ȭ:UR[ތsTj*1%Ziϩí(WhuV\𠌟o!ۯ kK}߀-Ø'hL`Gά(_vjmj]30;* (Ѵ|`L7 ]hy|Rsi8dQ"@-k퀿nXHິhѲY3H(.yK~ 85uQ/pWZ!Cն@oT2A4g,/$ͱ.6WMᓗٜ|#hʍSq3WǷwOz$C'GMhk~,C('B[- %KH:)kLP' d7⫬/G_;ȧrRߧVrBo ±=2lflbI:#CIן`Bh[{1ze/ph@d avZ^K_(<(q{InB7j()DQ,b'h-JU6*JVgD( |" W&c Z ?S'ߜ,%42'"E SjA;?k;PPҨݹrjCc?5pʉ[|.>{͑W칅&/5#j:1C7E<͏wiy(Ry׀Eo8lFe0;m{cXii?Ėӎ{P VpnHxHtS66R!ߵ xq.q֚IfSZ{l4E{)BzэxXCy6]mr7=!=`˨u-_9QlkV+_ѻ(KTD!3 W ¸844Nm><әD5%`%VQZipXVAmnQ t9GF4.Ynhs- U-O_^"iʼv˿?=k+qVz|4u b_;~MuD٪3.9mJ0Ƨ*6t܊k Ȧ pՃ,qdvU{줶tӜqXkӳP;Y+b |Ur[Ix=p/g(覎q1'g^Ku=}k'cHODӧs3tJ[d,0ZBW<``]͝ _'ۈ_(z~ɽ@tT'.Mp$QN~XGAsyHYK*ᾕ V=-dže4.-8}s2'VM j0ie_,L oDpN$jb GXj.Kegi|$<0򤌁ҬQ;e__tS Y~vyXE2l_qK& d?l!X9 Ucm:b-#X> Uo6\f H'D%*fJksv4]S{,-̛ C x~^ 6:#{ˬIa)ɋXM5㵳]{A!N詀\#Z'-i㈊"0Ch1I^Qō@4V7M=a?(Fz%C-DFVʝ> Q&"2Y9T8R0$M\}}dD 8˷OLc Q(ɇՂނ0nr>>X)-4O"Miz F`RH毷*G ,.3%Ę-B3 e_ѹ<1ɮ]i^[bX<rs7_goD+x/H{n۔S3+m[+`b0Թ6#ӣ<ٹ &9{ul&\,Fz?yAsfCH#L7dYO|^"DPPZDvcQ,MlѰƑclߢ_vBw^/,RM1%bw-Lv. ++8f%%Զj{1kq6C6wrŬyn6/XL_x;XS"Nᥤʄ<&J9&Ҧas.BӗziHrT\.tF$ ,g!@e%ުYjM8ۼImǑ%G5W&nv"8wK)~yW{DGm|Dڑ[LOa~!q囼UpWc7| =.,lm<;k *}J+)ˇ1!ᡵs5}CW{%W ?N9uģ"hzZK~w.f9EtḾw< E!ȟ)'i0ΰIA]T"%¡ܪxa{G &\&-_=An  O탼&n0g}yNGA;!RO(FY?q<ŨOz4|=:wM WF91j[g݌MTߚ_kŭMMӽ(w˽fQy1>=k F0:bo2gdS՞s}P$vofsk8u ?u[X"i -Q;~TR͸w(9ѬuUw~)(֔}Q3g5!EPR,ןyW>uh3\d hټ2>.iW)9Al9hnko5쭑Mt7/A=DeџH&Y@ыgFc%WPUmzOhЩfp$#$"yseqAXجWnzۡ͢\Y+*Wru-̞{ԏ>@/gׅ2auFBɴzcS!#<[L ϫ%lPw5ge6wyIdDv3+)]=Gb\zͭ5h{_.~mYx-ZQŌ!/C&0`u~\Zr zKo]~"`q`UŔCK(]bG6fd)VRa.!Bg0lc&w?cK29Z_ 9%-W3$MlrАp7|NY5"mtjsi^fBЧORf{v "uf51 pJ;1U"쌹MS&ivʟiUdz1d6紱og^7(zxciwS+MؐfZr|Y}`OZ?y{#Ȇy<_#:sh.Ĥ׍-o5#.#_=▣0ױ;rmv1,ש9h$3|k1[|yC1Pw }D G/qrˇ]JZ&MI*1C]3F{s.1<\M ~3n#lu&nz {1Y3d%mOY(juad3 ]J|̭J[Ry%3s%r96\&6fΥ]ww`P&*[D{G/?61w~ 0ILM\V]!CeL@AD#  c%s|_+"FF9]tttt.^ {Ar/H~ WI%ɽ$$/I9a9chi čeM!y^$_~v^?xj#)Vɶ|id+rK n[ϗ즧RJRrxYqG<}ɺ'U̴ۮf@ӠX;Ӝ%*(D ~&% R&+9;LYMi-H}y5{=^ jx0ɽ $ Wiʃw8$ lm?( 3d"3O%b7&_LEdؾ2~OolFs6y,VK*/&iJcߓ۸}$˃4!zxfv.w[L_G؛Fm 0]#,U?I/ VB$#?Y }fzy%eo|4&,We-%x"ri Y8a=yHĿPTCTmm:0+dxS$R!"ӉDh4!%}XK!x}e+}3N em r$y[0FZf>*-qM\SW !5 ܊+Jof8}VSר8BA:͌r'ZR=ԝyqŲA^ 'nSғDŽ :2tvbHh:n=E ƆzI1M 96fQ( $X 0D:+o3pc}^|~؛̭X@}=rVߜ/Ql5>ckoR+}aNv|EK;5Y3f \"2 r^6j72~ ,7W~2y7O}yK#}ptrt=W1lb/7E-S \[ Si-c f?(cC%rY TȆ9z95ZYH 3shE(#{a`#9,>B2)Į˞w69ɺ*M捯\ [>V0t3uKS @ 6"є{jxI[I, ǵHB{60HApu\/-ٽD % R ʋ.E޿pjݟLkKz0q~{"J- zbqĵKTp%cD7^/^$ɒi*J.? s( F?#+ =]m2m.Z6Z3PZB_%asv pEvaGNWV*ڪ%Rv #(֊!ʫH{EtUc`ys"&RLK%S` BC b 5i=g=tنK=;pK)NGgLWxȄVU<5>*mJږ7 #(xn.uXڞx~ȋ"hd*=]`ԻDaP3saM$ v®+a*G[J on!>\\̘h3@KfO׷p>ӿKm8o΍Cڼ5nӦ#5QuoR:O#dti"(Vݲll{ u޴9-Icy0l283;C  Sǔ*^}QS8hqi,& \dp tG߭mQ|lQLYD d0Ƈʼ-^^["`ߠ~(tp9 ^jzA-i^-ֈu_d/ۻ_n?|W?_=}ߜn?}㧻Ϟ>3}dxb>MyL.{ T Y|ff}B~G'kPs)ye=n 0۟ͺDzB@xo`j]Ơ+oBe ^D zX1CtMS'dθzl[;5~4⮲!YgP;တX/΄4-lЬPtF͓ab,`v>mNi2$ƉzM`1*uawK5kq+nXca) :ACqhye0.(f6ĭ Ն'ݑ *bOϓ,#7a.r8{Zmg:׸%.fIBb'.?GWp\3MeZ~v 1)F'! f^](1yf(ɁQ$D*&_)/?.46YSJn Ii7KFJ]ⴀkLז[C-¼Pv͛kZa hKMO^zQ8Fhۛ_!gS-J0a]fATF 3Dٳ(tɴ]i<D(RQzL~}ΨS{Tes60 zMo3vvMKڷ0}]/aT<$-Y!~ض`K1ͤ3ÑADLV 3acD-SjLG#3%[xSO*ѻW㷇'-?}?E#/ X<ŷ_']R>Y̾lR^X~M4L OK呵t\(zgBТ}ab C *4?p1H  => }u!?!t_=ZHR&>k ڲ9< \s6s2&fb:QZ /&Yڃ@Z+L"e nP}VhEInᴝ{/*gafʛ8Db  i3#gj$B=[]&+ '\Pa,Àc>pRtT2GiϬj:=H2'MRgR}>2)OUfG-դB?3fywAU~lF~ܟШƧWy C(habhNg0>z4_lSN4shkEr9fw(hPx?NF"}Xϒn3g^OVKߤ|dGbVWM5o])Xu;FfՇfmIӯ}/7W/GߘQڬ>^%L&3Ny,'qYnE)D$eo~$%RNb{&٪KFwoۢڃϕ.bu,n̿8)yh ~&get#>eis^^Q+UXqs쇽C4¸=UBP d<rtp̿y-M)cBJHDXiBqe ǎ2 ^I3+ Yo]"qxb[l?zm~ ܵ6-?[1P6J4Q"KBNuEE>Aq✖3f/gO}Is{3S{s}E4?'vvpppd=Z^h1[{*fOyTAZUPE qP[9/2uqkWt@oEO@JEB$2i#R/wd(Ge8}s~uv~%FW'W#>ުܚCYPV/$w(/gka$B-TO 9Cf0W*) crqj[+dۑyCs"v50LA.&--ds-*†JL/B!;DQMD`AQHF $t#Dp>>mĩ0J~NH$qrRH3BLRjViZƘs Q^ _z?:ƎjWq8]LDrpDߖ*ɪ:%P&Cc'nHv n> dŲ/4 7Mh* 1AL2z?8{$R- LQ!sLeuAo ,3bEZQX4-S?=^\{!كl؆cummm9,Om1A!ōu蕔pCd߈҇iUDFyIq[Zgl6=aܙk $zl :;Sfizydh ApGOH y) m5N-eusy6Z8$x-{OY+zGFU@>;+&ZE beA\)^hq!! KN&AA6=U0|5H$rFٖEy۝BF9(μLb0:p ow.G`yD@ h Q$!J{+Qqh78E 0>Qi~zBPaeC\Zv\%mjc) ”ps3Hd!&A Ui^ߔqCZ~K$ _z^/w HRba 1%Ib{E|G@O UB؊e쁘/X*0bxwߌ{'ߌHY8&íAh GWKw:b)U ve"Qc3aBzcSu6R2Ao5&[S̺:9IQakȜA54:!^ kS9 R[#!Z.yE5pf:jBXvgC>/J] a^"c5zZjӔYCXXDx-JI{ t2sdӁ-qpaBG^>usO@M5|ZfuFna8&2`>j3=E4XRፓ?W5WƸt*Q+`Q/&{PP K&mPl4q  ;$:C3 +v2Mjûs2 l ו;s}$F-xG[.%GpT޾__L3'B%3>ѩg 8TL5C*t]tpZGi [QXCF&ɺkvy n9@cVbL8"=I!\N yAs62p!:QʻAȕ֩2L?q5dݕuhZ "u|Γ(tڪaMrZBJiS97K#UAQi1a4b3 )tR&5r3Ly5)o?Ly̅igzIHBpk#9 JwR=tDm&[f?h,KDRqX‚;Ml9#d;rOٕ#]LUAtjK; k p;]>h\}"辑drBvmM;['nYEK2\\1]Aq^T%[DŶ:(i%Iӛg wY)^% 8 GY> Hc!A杮S8Nx֒SI+)W\W-$_&%+;eBgహZ[)B]0 :v]*:f4u?'{߅TyZ~J*IPꚝ'tbZf@NyܻoꜸxzQ:ۋNm 򱧛 VvGt|P}DƩ?jgJCLЬ"xd;YŧRfVkZxNkb uyvuHC5N;Ƭ靼bj(!]&-p(-ٜ}WQ(s$ m-qЪmtc>#T>h|CBʷrZЎ\qH8Atv?wjۖۦ&?U6OUls`OڀU5mޔn>4qY/u%"v>)T"a/ATlU04Ԥ eNr%Di k#"cE٢uwX9>!B7]>wCyr p􋚰+?փ8vwW[r*"݀T"5L=`W5]S{۽xEZPal;.MjtJQJ@'y9_VԷ-'fe>SŁ߾ 4*:!fgQU4%nIvƤQ0l:| AgtCcrl nT&2.8^3 zt|02OaɵW5c]ߨ )nbr!`PPTLabZ-. ,mA> F~^Da^'."n7[ZW@Z]g;VxԤyNt%*PO\ϴΔֻ#Umz&ƗDǾQs )&9ݭ@6I%6Hwh8Y#D#1ghi p ot fpbP vXmQEMjR9{ `@.D8;L8D۝yوO"aq3mɕi".*$];[VvX=S)B+BUtW ~D%pL*wZq*RH+FzhBjX͇8ᴆS;>yEGwbW'}vПC ]k>pc6una)@mnyJ8z&gcPSV k|N#Z W\˥> ަ)>/5!ah+(Feo$VLXDvU G @]fhdu/`]dyI 5P|O2}l.0-gZvy +`L}#Xp _z+&4۟W;Q7pffBCGrb 5m <52BټS}{IE ;{QS})E5+ɸ;j9)FPU@FEn:[֡-Y)xFM+2pbFh5S/ĩZb9DzJ3WE>ѝ\pY2%)^lSʩUo`jp啉/Ra j\:Kj9`كVقj_sSRE>ۛ\b[3#`>G#TyJ]̑ \+ P\ax%nm\Yk%J .4ԅ̨uX06/c5.Y¥V.( o@1֫]gODJxꩠ" 83Nk hstG!T` R, V^'L:,\qk$;Y! rŇHaA'bjz HioAU/@!)4|Ю8JU^mI؂a@M$0xrt mwx3/ڤ*el".kTRףypArht cޏ4Gq8>ڪ@7; 92;T_)?k#*WW/hkR^܍K{A84.sUC)gPqŖE bW|Df+3oO^ =!Bݰ2UVgl i'ڞhx`٥"YyZ_?ӎ:rM p}0S.yf;YǺ==}UMDz}_D=5*MQ]|+.O?xs݇_@4>Bx̣໧f^ԍ:nB #EM=|ݫJ?7H JtA[b/1΍7Q*l|RoSDF pJk4WKJH\%]8u`Xr[ < o=ʷ<,/f4!'_-'0/ɣ Qp@E1aQPmw17`- ,s-H,1}sX\,rxn~2_T+]2Z~E$>+ vPZY͇VyC#gYx=hg+o-.RO.t){YT}ǤPA?q*+RY7 yj^Kb>%2hB[;E M苵u@WL}wOq[wmknNwSbHԀs;X xWڬ`H`nw&h~>ݓW|1Jp<0 ƨE;*bev$[9i9ؖ@0[loۮ#T7B#=Y0g&40TV-ŢcAޯJOQ3.?}>AIWK\A(;PU+^Ԅ z%zmSQ,᡼9B'd6^0+l3\oôJΠu5x槽Q[P`PJZA!NQ z%|^L,֓[MZ8 H7d+:9]x-QbdeQ9ow(Usqg hJUdW 傣0edw 1;v ¼Ah":BgYj=kP=_h]i\s~۞ ;[cM Y!:/M|xHHOC2Ё Y%KHpαdjP:-6if4jIg,Dv6Cr&B1^(0׽GΛE].L,|CB߭++Zp S&:6Á;FJЃ8;E<Aiz\77d2J] nǵ ^ l`ÞTs4ZOUFQ[R0ͧD4|%n6DVM!+N6ߎLc+/ǁ6a ȮG rcagbI1 x_.y«=g9%C̘?%cS=;8ޗݙk:)koWS75ona^2Zm~$.*Wr+NEsg .XM|- 2GVάᡐcKؽV!g$soj"Q?ޓ?47B \'MhY7fR zѕ70O[> 4Zj3n_5&'e>51S&tf#7H¿)Dp.Zul324Pd3naλ ݾ|weoP`GoQKV^`aW")D0M8>KiaUj 5S\c?wp ʭ^V-uM J*x( 6!QǮz?% J;z6,.i|{4C+m$8noU*PRUC lPj1Yޏno{d*7QlRO`j* +}ۖ=#" ts7{PSʨJWFe h⚢]0+dڨEV"t>0 ]G.K3st#-eF7a[R aʝ+M]IR0# 78ӯ|Q@xdaFm4UsAWj&3If0mF+gPBY$#J'4h]u$ܕoBC1,| \L4Q kƯbΰ=MZ=r;{T%(j[r:M{j=:וR\W -N@s%wG7 `=6BڦQ'1vbX阉yIp[.ߓٔd8ql1?kp8(V1Ee.O Ųl9̱3x+1z(a<Uě‡K{?`wF+ CkŋӐ:I9wǣIz[1˯(@ҤВl$B `&,:ӹK s([{KCQjm0T2o#,(ɒ 00i\e0/vS*(Kĕ RdK2U%8jy>-UH_mM[@ Ipi?9>rC1e!\|~%$nR0&oGK0Af7))FDjl*ThI9(oHl\ݔҶG; ; (=DJCL#A޸Bȫ ⋹KcJ$H4LfY5ݖF6HkBC&77.24#2@{0Iv/RRHbccdws{bIX8Fg ڜ#9DMiwӕRGE *fT\uw|<|j Tc.j'([a,die:ȫYA`ADNp|1Q}1Qdf;xSmUQl,8[1IyG@%>%>=C h(>9[\8>;ٖtq=7υb߯ 6dT"iD#W!ޣ76?[hDv=pԆ%]kPRn ϭ NHW3g(,\s/&\|L  aN)Ft7s-?hBt{Mk%4ӯ\r@NT/lXG|"6]PTup{! w[$oyAMp~Aġ0 Z֧dQ.Ќh'ֈZJ,.sLD-K$Q h. QPDU/EyݔlkuݫZab߳0IZp/eH7&ږزߴrvh`=A :siCd^bO1貌 ,{'_ '3L\cS^]C0$o!ME$> . (,ӹ)+)1[O9>.Ct[aQAkPM!?wɦ/W ~QB"58 QŨU$븍B,+.˳^7j;9~_AN{d ne )ȥ/Ih)v?y%AB%Kk\ڔy4݋sX?a0Ѹ#K f~s/I_hjH}tlXGR(6I?XL|4Ai/(IKD]NcU?ø:9|OO}y-@Ȉ쁮3L49oTIh(ĠFA9/Jߦ B͋"X8KB>HŻu8Za-Pw$>li~c,S'!P6X QKq "oʳ˲# 7 Jvcz2aKKP*C%zqI]ΥY#.Ƙ+;p7M hJ8Њ{~Y/Zf-a^%CdMQ{~$.uduioO=j!k,X-4ȱd`%^ D% W`oW~<[Em Z=F"pW>ܴ7z]18:A7xiD B @ٯML$ ej^`pN"|TLֱR3^ϐq|'ef,M@rtYLc|b4S2lN"4H_J!l`*?E7?e)IzcRZCyB mS5ob_ LPuSvz]T+v`lŇoҬ;K` pѢ?qɑ("Xs\psSi?te:q1t?^PG9Cx)JՎkYهi(k]CImdOi'~9V׍pr2CELs5_$"8 D @%mWzR9)6ˆT*bTvQ@r"1J"e0B0XXw%;X[rz3_I7n|%MI78@>r~nį7܈aA2m]樧טG^7-B/&eAxo[hz.?֗*KxZ9KQ2q4mQ<̜S0[(4D9&,TTKBp.!/lpHJq&-U~g!wt-|݉_wםD*b4F͋-}6Qd;Hb #?9Vh'4ա1PnLHP9)e/dn EU!ga$BK.uo!8S%wݺ&n!v#aW9Fp79~`h%"ic!1威fΈjyps6%ѧs 4+O  n$ GsZC)q^vpX,(ǚ8t2]vmwVVќα|NuV_ +E73Gxzy"pI{+([ݨt̓28Bwm"OѼNh=},:o{ƍyG:3AQ Is(=! zw$!Υ:e5FnreQ:zSԗ7NPܟU `\:y,rD1^z|4!QEڒ~FnySEG$3 Gz&bn<+n:>iᮛ\XQ>`pvm[!a3[S ӋXE&@ZGz˅ >X3Dk\~;\Hm zEѩkHc/07zK #(6y1 jːvgɷϟءr~}pc޻uZIv:I*aiX+b # 70DJjt2 & FUqxa._qs~0Ni]G5A206U RQz_"3N9 ܧKe^)/!aρ"C$+q/r@H|h1rN>eů]N``ߗ g HZֈ ^[8Byn $>A)Dz8O˒QZt7dLF+Q5םixF 7Im%7,A\lEDBQ<(zOOϛz7fsR9Q9^gR6~SlpآP6|OyyWfh}%UVh(mC-MkNpr܋T AD ]aDgARlnjvr+ĘIW`EBr)D, %iWUP^ܝ\"9㕨I(9pDgrI\}r&+Bĝ9: 6)*:M5mb|5\y٣7{kjXf[* JS]Fu<vIbrh+ɃFx"KK<K5n(ј[' N$"l n<>nO4G':fePҟm qBgR̮-:֧0b8)ȴ` ʜ<]m"_9nJXXRT]lS"L?,PedDTn^HYmcɻuWU!o踳.&`4gӶt 4doP\@r:n, ɔ:qO6.2_yX8@-ÂcayIqNuQ|^FU5%EdcfCfix e)I/5$xTun$0J[6|r!T^nlJr$"fpG)-t 5Yiq8d&##ns'&[K9,wS̥ae!gX¥aD9&8|H>,]g=|p:`rڕsBJFmoj2}'Rw?^bJ߿? /a^A@!Qخ hb#2*L,=Sh+V%XՒ?f[F@{Rv&$ʑ.6̪I襚EPhbA:Y-1K0#11@8`wЩen7y& NZؕѽ|M@!fxar(jUsn}wO϶|>t淣᥇Lk7s\P񐅌s^M_p|dF3"uVm i!-gÏө񝑛A),B^AۿA-o Ma ' G#)Uh5ׇXE*OYYM8#imt$¨;6Qq5ƢԲF+8oQRLж]#U{w}h֞TR_J*!y',AD/h)s&HpD0jZRDe," dAf0\3㴩󮙊^ nq2ֈ-.-=:DT@-tɗŚ]F)DfG#u8k균9_*ÃDQ$úXcW ʂUzT=MuvMv -nU9y ->Z # n%!5No@Bdx8p`G_[j+}gU'JMʒC[LNJNQA+ ֽ{^~KR(m6'9>>,xpr+Ph$a\f+O8r07ܮ;4UZQɉO>"V 8l^eoO:~spJ4|٫㗻|{zf'\)G߿=xuzpĶ+Awbu-,.f_Ys( C[ ,kbtÖ xIEPY:SsO4_4f5Oc=|2yJ0b^/66N鏏& A񎾄XV7i@* mb@f&%2ݗ/AuMg3OⵣT_dAmҎ!d 3;oԍ"m #iu8^HZ0?(a 2oDMMxYEgNp5C{p3$GOyGġj~쏾RH1~q167CL/ƧE`Dtp`DdqYWY!$~!s/ O -,,'RR1٘"֐Ejv MԷ<]~ 0zuړGkR'puӶOinݘT|~qSEsnekfyo~O_\?ÓÃo?7(\?bkf"% `lXvL0=\-VvnyrƎo9USFHH 7\}ݻȉc\}YYk=l浨sP4QeZܒ_vbMOOOEVi'Rt0ZtZVm'\1Ϙ4v܁Rtj#EzC Ϫ9qݡlP3L`4w'M=vU`:}v:n.tٻͅF=[~\4ssEp^o?#5|h*7(K;\Q\Nw~~^?| /\w!;TKqP^86o5-4}ܮ./'B;K0˃G&Gw5z4-DjYthf,AS~}],Dd>6:|^;zsa_Qg\#fܩwu*~5 $W_iH;R^7ٸ:~P\J3'Ow^/<a:zF?߯Ls}w_;_4s0y?_N4u]>[oF w_i8|%N[?_g_.|į60xu|z*8OY3eCL >{ށ_4fϏ5>E>_K7`S2 C.5؆_E%[l0ww,:`ER|+z{Seբ V:rjisw Gtw<%|!FF/7h!掔 nȭX4A]-#Cʫ !P6< VP QBܴ nÚ˜z{6 ыJ$^LV1pG_!02\(^8WIl3E؂1p!ItU[7b -LZRMy.4w32#qMaхB8{U8?3JYCKf-Ø=Riߵn2=pMRXy,0|>VH(@ @ A7_]tɵqtJ?K] ﺇu.۰ᴒ ;,$6?I1q1hhn#UaY"Q !&*:؜~I%%V\P<16he/ 3/gM2ZIL@DT@ad\Ƿlz`$MD kDha=אݲ\C"_V$ 'pj0XZ.ZX'$Wlſg_"|'N4"Cu`ϔ6RuZH"Ն8;ё793a+%qPn|D#>BNC_OFdޭ+n15~ ́KZJ! v^xh?NN?~Ǐѷ~)N!~c'fEaEOжzFx TLPɐOgYz|{k@;2hfIr6D/bdlx=ۀ8C{*(ÕvcJ!g6.>] 7k÷=ؙoVxG₼{ϙ?/)C}oI{V|~\6#c˴4IC^XmYӳƥ weݹN;OuU[q-mQG{lM5_LXV%>ޒ>o?.e1zҙW=_?G{]|ҹmo ~"UO$WV#钠m_xT!o3{myb1:Y+1Dgo+|w c?69:O.~'|"|%di3':[P4x[Y)m_Áؔ8?]3.Yj\á %['}:PXhG& ؇w/ |1o(PfD9JX"zqdxlTo.6/i~OrӦz= %x3p2z`562 '=6P~>4 :pl:z1ʼBYRoٲOri;ϰdِad).g܀ D< ,Bnf4O`+> y}HN,&7 ,Na7Rk^w}7v3WŢ+=oUT/wYAEb^Gy]^Q!΍Tq11I~Ff3g,?1yg3f?rNȡ=( G'ߤ lK^ؐ ,X^il(\4\?,%u :c7%RƦΎGdR;V0.}Ir IT~t3݄Owrڮ/|7Ɲ6k}>dk $엨!]c_~RUj:WJ-OT@5mbޖfI{6VA}AXǚ$gIL|cy†nկVn,'o%5ԋaSGz-S#qrde'vDn)%NT$6hXzgQ5/uvq=k"6,0rqSΆ]Hir=Ŗbڌ6R~ "H'.XO*7SeIBjy2PwI{ㄋ_#]7a!v⩩_\hTfH ,SqpE',50ZH I;9@_l?& extLN'L $禝yAmbj$?Y\R~LpX 9鲆VZ}ldxbG6'qx]reJ.Cgψ?DfaI.șM\Kg(ŸVʾ!)T9|hkYi^zN予nGxYp;9`(OJ FxIӋN z̧R5̑u|,o|A_)Sx9nS3 ۃVouvLt'|mA\L b>Y/S6;EuvݓY7xCqs_ R3"$LV/*k Yy _TP9ujW:nX @>UV|͌wZ'eқr>QPRLjl&v "mg[9$Xjfms?ȖRbpI|ڮ&VK̨gl;P')z0 >dS(ޯqSZwA*X1OURUi.CH`(B$=ECp Jr?AH͸*Ǖ$YxQeN)a! eZR%Q΢ۏcHMWj.{&nL­ܵq#s]Ji'DBPnG@ } @QEέ+ѲIcR47FWp|G'M,3cf"WX/vB{@ꡒ ::9iӪm/$PWH>z"Ny~QVf!#U^;olRs3CHֳn0&Ybל%XR ؄ZJl G&4B:qliɺJdȑx 'qQߥe]4x|Qm[vVhCt ,N)KxA} {*Ra*jvuoXx&&np>N)TF'2f\gUJ>)CFcYqCA JN Pl:_rdn+ccS2+fѝʦ0X?&A/ P &hO ģ DV 5!ϟq¢=h!LYhqan_Nu ?d\}C"0"an6V3MT?Й}Kh{2=o{'<9pMZ  r)YqEP6@ tQ{pp?{;Ax?^AVr? l~HT6C"Wj1'JFʮ~{le+)ԛP7- z#_CäQzjYv%,[180ruYq& LF }gӕD{aÚ^B GjkhÊ.o6{Ԣq"X~vb 8SҰ1ixfx4A KћGT crY T'ZBW]g>U؎ހ75`cg$WŁa` _Cқ_^d\!` lT]L␐$.5GOؠ-CR(L<#IǠa=dtgN84u_H8\4gܖ<ɕNn %=mmar;OIS\Lg-'װL T͸DT(sM`';-KIS|X,N~Yj.q&*xb$NQ{%T"cї歉U(so+@Vz2 L F52'!# `ʀ{`$:R!(-HڎWq2]$n :r2iԉ=a`1 ͌ctBK =#H[GR,PT=dک}ngP q异™hx vU^jvm~n!16BrQXԡ-x,޼H/a9r˚!(~ S/&30U L.Xj2CXV,IxQib;;Fpj>e/C'& 7Wq7l|?CtYکp/r1Slez9_͘ !7S8+# Gv,ɔ,H>Z9e4ntڶ*9)0;YD.(C{8Tv`WIL\ͤAgml%2/Bi)Czs[qx^e1Y=X/!^j/Z#4r3,31(1CY]o5KR yIiVbăƍV!e.G/ocW/ 5˞|&\t s`ʧ6pt}QslQ2{_tv}by 酧}ƻez,l4i'}yp*֘"ZageI`UENoXN /xي]1wҴj5ճS9 "gi;x[ 3 >|;GwL[}o2ie1o\סz2t:<&@#o!f4mdvR%~F#ۉNcv CO =nKvуg*m]UBoF4^֊ *iFgN|jƲq -UN۬@f #D 1ג t"d˴HE셆V$'TqظȊmK[a&Ffnvs /(" ])8^M%S}v8J/߸)m>t|V0QYtJ?DDQ#PvG>{K27K\"4aQNǐ}i5Ȱ^J'Vh @_C`*vUA@DIA Uभ!Qmi*nr!oR6yļSr!P @Z(qrԖc`-O +X:vr؊a@ 'ZR\v3;WfM>]n0b%yR@n@%\MaGӝݹpzzo0}Qr.llFl63-e}xKSRP@Si@ yW jب>yVUclo<^z¯/Ecd4vX$ vBVf%,CwJ$i0,^ 뼢;g] HUՠdrF;'OsJux_FS%9vBIvڎlk@s.[f)ŸHIC7);\&V?w+'!4/Ӯ[5k EF26pf҇32]>,߉όظZ)R^[r&čpFDŽԴEٸ!4)# )3>nB38/ ]"+j}CORm`0߆3 _<\F1!dC y hC1pì9t3s,pWc SnáX*TVYhXOfw\`bZ |$_愵%KqE^3wbf2%A)"Vu h e3#}RKKibD)s;YrA~8x~:B`Rٔ_Lr?y7*:Ysw$YO>@QBprR],w`>V!@Lj E9쳟 be$ӑP$߳*rwEDo̊=(% Tr:IHflnzC!m&XŽιɷrq!` @ț3X w{̹Uow+/#\`;˛:fcBc?Oo|9?N<-5Bpm;ߕJFt.쐐s=w&n cbc|8+pָ7f70uPSFHCIC̙m4,&XGX<3 ̾P 7w) v*;. Qb/Υj'+'rn ҪҿJ7NlPlN+ks&C/^Gf~ ؐc8 bI!d4uFRv@O3dC¶^/ PS^J:|N#V2Yc$0C̑׭Z'YfW!8W/u[Yc(0SfNJJ OjOjXJ"#aU½͐M?m^BwTdsqt/J^CFN (H49RF=bI(crB>|.|;Ԉ0aD̺2d}"@Y6q]L_C3d8Îu 0@A߷Z -j{[oz_R:EM:/ ,YN1( qgrM/;IMWa+Z!Lvs8Rl֢"e5ja }adgYYK5ߛI[`e1%bԚhPXw4ZRyɔ*I}ݡ0v| `:*˶DU 0$VM6ja_-늬8YܱᴂS¸q`h{Jf{̃"o;Z!5^L_mm%1F0v;mQJ$"7ti3.mO'"zs .=7}Z# Z ؜*k;ݍ@ #x54qe!P~V:3?Q N0+ra{q)Ɠv $  ?skbnPUl)nL0Ji5VPoM:U-:V-@mdj- 2mԫW'up1#n!pN*^C/uuD6P5? o\}2mw2iGB;QHeiLxtŒq#qmss;1T^A[had!7PInqPS]]5\7$`5]pc[4eRnY7lJ椦q]+';2(`ssT9j"^njN5!9,.LJ凁F b),e} fᣆCvyS qQhk*lR,.3!46ٴ q t¢R@G/40`ݾM.nu&9SUUE2ZFZd )_CīY]Jj叕U xRxPZg} %-?,0u ͽr$mbI R&ߪ'+`='Ói`lP5i1n~=6^ZSQ?CJw]_l@#~3A7iHg܃+-O-q=;!@.916N)= f̚YY0 94B0{T5Z9)2Lj@` Ui| JQ;YO-;D#:GMpyWn3m))lBY/{ϯG/#TO0YU\qru~K :a(e}u:KYa{t0SvWM4@c0CJ5-ݘհQ4r na=e88ky#8rbpЏov3y;i&Ǒc%7M܊+F k2ڈȘۼt `B͈9 Ɛ+Z! Fr*ԥ J(qjC`tFX+ʔu50'tVg6!a9ه<9oDy;Ϩ ,(Ø]Qahwc09AlVՎ=vatKViWrM:"sD%M[. ݒ\Th2.+T, "ոΡ'(V*Ö'tnv;i&F8mC=iN3Kݺ:t8Rxg Αٲig>(hZtjwѓaCT>'~;ZǐS^9Y'ª)U(i n#@3Ub~{?cww▯u%wBM\zz[sn D%IVUO$WbˀRH@/Բ|.Ag}\TBHT}ͫt,jkZ8]嵄8N̕ kz6GnO$!s@QQ[[8!r:`ꝑTdAEԈ2j 7k/a:k//g"qc92úüϑef%q@8PKLYo·]:<a{z䛳qx-B+]]H{E1иDpǑmM҆"&hE⯛lYh{*#Qv,,w:Ko z=#SzŢ?v((PQnu NDvjy΂\z*CԟG Ɓ-207m`p^c͌-(ɣZEA_ t{AMQTߢG≐KqIdofrS]ch\oy Ni!鴖>q AqdVPÖLP`f)Sj> ZUɥ?iY'=WjejsFo8Pұ*{^7jUoԗh$ I[ VR +VҎ´uA(iB L|wDtHZRj6@l5R%G|[J!u"ݸjΧ$j'Y+m%H۝}T&5FGc|'f~"6/$,Pߏ^|3?V3Ao/N}R cm!U9˖ruk ~n`BYbR|6̟6, 8_Jy-u1xp r>m}~Hsk[F9/ǍboN(=f> ,l<њyfUF`5\ CT]YfݕR0Ôow3}"O*Bk$Nk0Dcw&yLU+-m-J/;G6x`owz#?ݴF nUag 'R=aܭX :w,NYZL+0PA/ sK0A<_Z_\ˬ/J2_>| z|sv1X.F7;"__CM5FlX#edT7߻]{qF6 X7̔ tA`1pI`9ΆWXQy6osO^jڍfܥsZc(|\MyCۜu*;会Ad]@UZ:@R9TUTU 1 b[,6j&:N,&^5wjst\]Pb(MUVd|$~_:}󏊰28dW;7cyޘAw@P/fH.' yrn"* Y*ʺsv" )p/USnO6Z&@0`u$I'&:iڀTzҙ텉RcBȐ׏>L4$}.t60 6$:d\`0ƕǾl\ 9r ߹ T%Idp+7mhjnܐZukD`[ ʏwk4 Xrf8@w(r&;P ' Oc*aQ16u<.&OW6>α^ r W+J.+EB` ;(n!@l`֊Fϵl}P+~qgmAw!r*Nz)i$`JޢW)O5XC>@j@mv I#QPv\F.5gh2M9+PǪ~ 4oT<'l@JN=lU37:3BzJHx[u/&$]kt${6WH9h V\9QcҫQ@N_ 0yTɖ?od틊q(w竺\f%S%h4˜]ɶcdҗnۚ{<H.+(y YA%x*JZ=.Z);O[xԣ"DԂd/=ua3ۜh搾l@2 DRÆ\ns^M,+P }d~qϥPmu-ǁ1 IDܠp؛i##ޱk>3O 9A.JZ!AvD8[J1وnC;fp~ݳ$q* AGP\Y<-T%66u+x '::q+j!-(Va7P$٨CDa4'j=&/RckwжDlpa~=/@~)~X5f+;veƣP,Z5ij) fɁ@s"0T(@kzmq3 -ݎh-ug+dSgzCk 4; _Z~6M_Oq1ԫb㺲Se]+pQqsd[iAcCFFOD'a:r {ڐ,~;/y;l^}%6(sڗg9+dݵ7MdCHtҎVFjQR#%1=aE y획֋&%4C/XF'BN; Td)8Ėv4ơj}SaG֚lUIl-]MنWyV4ݠ05L? bci FG8C<ؑH@bR3l)m_<F?x+z'E&=prT\LզayT_U5aJvl7«Z{':[GnPI2/$9L-1o6X"O}e_?4u|4Kf\3lδJ9Wn?%SX =eaOvf ^F7d ,4ySU@X;NSP15OZW|u뵳ԚG~5Y|]W3lah$SC}{j']}RmX7B>홿R&{TYnY)~$ >g'>{[v F^$,Qwɜͩ =z6*U@',BZϨﰇk6Hbhۤ҂yxZ*2-H=.L-u}i(.ؾ-)Bמ9:ݕx'a ![Ts!9sIJwEnIndX:fNBP [JaCLj8l5.B[)=2fG~} syANfvp͌uŏ<*% YـEpQtQ^XtTD5{6:wZ ^r6J;~N-#0Dڡfȿ!|j6z߼k<f ǚomRZuZo _xdG+%R-t}1I&rz F`8>ew*nG5cor3<@QnPĹ\8,)AwT{)^ER(uﲕ3>5C`%Hbj0Cv&Ɗ(g? (;[VCfw<%NDk7H%+jhe\ΟͱFZ5QZ(X6jɶOP⩩\2WgZ|@^ӽ25Bꖎg27=(!Bh8F.ݴRq_۱AMV nM\j AlؐmZz[nFsT#XIrD^!q % eu 琝zq7T5ujY>Ho,Ѝ9mY2W⬇NUDL$ hr1yf{[7,aQj#Iοc>(ȄS [pd\_&z\bve϶1s#c"ך{ 0iUOF emcيo8,vi6gW+E@xmqG5qek{Ĺ5? )Ac^] VJKז;NVlYe؃!*I\#&8실P7 K>$ϩ֒a:~*391zUS"g cX̌5>vutp!\?k^}F`h݌^qxFd(Q5ns _L5H#t)qi։n.BjV[ݮgQvh.|Zz@_HBjMz`&rP*vȒz P:4To7-B -2Xd9OF孌L5X㰵̞~QbJw:DL3xYo52ཀྵYș6D_6qpQ>9+ՒMbs<Ҽ?&`r!|ׇ ][$gW{[x(rۗ_?|WoAU(s_ ;YwɈgз]Z>֮%l^oJח+t'%r.U_[2pwc tes*3C%`*UiM^y4z23:ͷ+gqF#TnU kJ9XAte-9WslqֽX\Z jeWK(3Z-V$`FGq&ډ陃g9x09v7o}7ߚ9x'~ÓoV4NHbH >7@$~a%|7' m n,N?oF3a`}p;xEFu_ a8z$_kЖ,r -Y  k:!md/u8rlR:#_zi)bՂ=d6ns>>Df:<VxҺuQ&7!f}JN}M}گiMLe6N%˜Ĝ![FjdY.tmS6(#yoi+b9Tsځ5xX j:ST7! QX,כsfop\WC[EC@[\^| L*%Bw8<:!5=Jc3~%/ƪoR*]`I15O)KZms+UeB&`G|bo^%!kƦGbUyX?&=xX?Pv=ĤhJ%lId"{s62=⵾ܪKGI 1ŤJڳmWov-9V򚔽 ZMX(;:  jbҌCCxKϞm$dh Zk2KEMfҎ;=ԡ|Sϖ4݁i#k4p6NGԄPZHBSGFM!`zнUf= k6hb~HJ*)ԽwU)6Ύј9fW(-tDWIkz&VۆeN0F q p $Sμɂݰjz!N"zB\N ClJ))\]Nx#\Y\dQa9<|kle$A#%$2rJ2S3I(>wws/Tch7=D#;m4΢P:W_R2)?NۍٗEZzdjiv_ PT鱽Nb}Wf(g/uS$cEc~Fޕ )t:4sG;t6 G"FTjSkeO][+]o*h3fdK7P#@lJӌ'9-dTH-Kg'r*ZS, i jӝ!Xh ơ)%FRVF[W #"6Xx$WY%Y:h},lLH> Qm;cًOG'/^x.w=B_;9 }JWOp!o|!H -ȯ(._i9Z=1dElM;Ch%9A($ 3d2 j@@,!u?ixU@8.V=!/UF6N>&tW%K˜:[vRK*WTʇ{_a/5 bW,}UXrlچ퍴zIX/gM=`qw>[k/V*,Ы{'Y%oC=o@0w׬hA!Qai9 e07}݌20[HY(xj~JȾFuvFzɯB3A gD,\ ٥1Oz+v?kޭZʟjGe=i-.P' ljk᫳t9R>BStnU;,IΊ fl]ι+[9\x$עÇ^i͝3Sg.ʙM ZRNt#D<&vܾ:\old:ik"|