sssd-ldap-1.15.2-5.fc24$>a{dv^wxF.>=۲?ۢd   8  ,IOXx     4d6<66 8 < A( P8 \9 :B&GH I,X<YH\h]ֈ^bעd؛eؠfأlإtuvwڔxڴy1ۘۜCsssd-ldap1.15.25.fc24The LDAP back end of the SSSDProvides the LDAP back end that the SSSD can utilize to fetch identity data from and authenticate against an LDAP server.Y.buildvm-armv7-04.arm.fedoraproject.org_Fedora ProjectFedora ProjectGPLv3+Fedora ProjectApplications/Systemhttps://pagure.io/SSSD/sssd/linuxarmv7hlXKN"I~J@VZA큤Y.fY.vXqY.Y.Y.Y.Y.0eeb34ee024719c8aad9608c25413f3504985368cf12d4e23a31396023892f0d8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903c0814a04ce435ed1a525b459d1f3462ce4d80feda91da2a6e40a0cad4eb283aba6480763b0c94f592f37b68270761269606f99833ff32e8e8d5cc3ed29f3242aafc683cbfff71b1212d7f7444752266bb45fd3d0de115b96bc9f619cd1b65254369c24f55239f55c3464eee26bcaa2d50bd139187a2227b9c4695b2cb5e789b37e310d32544b7575a950117828bb24fc0e8d62e10b1661045eb5c34025461c4brootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsssd-1.15.2-5.fc24.src.rpmlibsss_ldap.sosssd-ldapsssd-ldap(armv7hl-32)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ld-linux-armhf.so.3ld-linux-armhf.so.3(GLIBC_2.4)libbasicobjects.so.0libc.so.6libc.so.6(GLIBC_2.4)libcollection.so.4libcom_err.so.2libdbus-1.so.3libdhash.so.1libdl.so.2libgcc_s.so.1libgcc_s.so.1(GCC_3.5)libglib-2.0.so.0libini_config.so.5libk5crypto.so.3libkeyutils.so.1libkrb5.so.3liblber-2.4.so.2libldap-2.4.so.2libldb.so.1libnspr4.solibnss3.solibnssutil3.solibpcre.so.1libplc4.solibplds4.solibpopt.so.0libpthread.so.0libref_array.so.1librt.so.1libselinux.so.1libsmime3.solibssl3.solibsss_cert.solibsss_child.solibsss_crypt.solibsss_debug.solibsss_idmap.so.0libsss_krb5_common.solibsss_ldap_common.solibsss_util.solibsystemd.so.0libtalloc.so.2libtalloc.so.2(TALLOC_2.0.2)libtdb.so.1libtevent.so.0libtevent.so.0(TEVENT_0.9.9)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)sssd-commonsssd-krb5-common3.0.4-14.6.0-14.0-15.2-11.15.2-5.fc241.15.2-5.fc24sssd1.10.0-8.beta24.13.0.1Y.@Y@X-X~@XO@X6@XOXWW@WWW5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 1.15.2-5Lukas Slebodnik - 1.15.2-3Lukas Slebodnik - 1.15.2-2Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Lukas Slebodnik - 1.15.0-1Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Lukas Slebodnik - 1.13.3-4Lukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves upstream#3382 - SSSD should use memberOf, not originalMemberOf to evaluate group membership for HBAC rules- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Backport few upstrem fixes from master - Resolves: upstream#3297 Fix issue with IPA + SELinux in containers - Resolves: upstream#3360 Do not leak selinux context on clients destruction- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Additional upstream fixes- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code)deesfruk1.15.2-5.fc241.15.2-5.fc24libsss_ldap.sosssd-ldapCOPYINGsssd-ldap.5.gzsssd-ldap.5.gzsssd-ldap.5.gzsssd-ldap.5.gzsssd-ldap.5.gz/usr/lib/sssd//usr/share/doc//usr/share/doc/sssd-ldap//usr/share/man/de/man5//usr/share/man/es/man5//usr/share/man/fr/man5//usr/share/man/man5//usr/share/man/uk/man5/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -march=armv7-a -mfpu=vfpv3-d16 -mfloat-abi=harddrpmxz2armv7hl-redhat-linux-gnueabiELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, BuildID[sha1]=c559c4891f4acdc06c11046b6c948900b8f2d6d4, strippeddirectoryASCII texttroff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)1PR R+R.RRR'R%R(RRRRRR RRRRRRR,R R"R-R!R#R RRRRRRRR R*R$R)R&RRRRRR RRR2utf-8?07zXZ !#,]"k%j{}}ݱyzs2$RThR#k)ozYd26ᥔfTHRC+kч)]!@R$m ,h{B<׫s̮:QŘqWϴ{0~n,LS7{CpA'CZG!w> ݿ̶X֏<IصB+j4mO99RVj\3+cMcƀj<öm=kO)ڢ y$j^^kdЌP ٗnoLF8%c0Uo@kܳ?T˫F0br:P' + ;$e,b\ ¾BH_%`.a0ƾ&[! $/eO vBߪ  6B +Z ~gy ɖƀZ݌+ ;@MaМyu6$>7RS-jsC`&G$ w1Eҍ+@gs}0;:l$TmD7+`tZDu |z9j8mWl`W ziQ?PZ CgȄqs˳/IYieĴWkj{Ue-o`6b \I?Hֿ.APJ*;m\{RNGDWf>gLYCr5!sޛ:~FּEgds$$ZQo]m y-wSZ|SMҁ Tɗwb;7^8QC"Wy()q WgA4e>v,KdTp\ 1Blr*W3#-+45̉uA^$MK #c{5}2̽z>pDRS\pSI:S ~$5v悌?Ç1ŧWɯ˰O?^V{ж8I?be T"Q;×si/w|!1111fVA¨3Čܴ#Tbeyŕ2ZIzn;dyV/g|+hIEv,:cq!&ٸri_BP8x*d=482 ;B>fF3aq/juJJȌ=JnHMl4be;n6[n0 x]&0ܿȯoeTK1res$YLj)gƱ'&jKLHNۚ6lorjh05݀u7^@}q@@#s֢0R.'QI 'UA&z@q0t ܳS>Ғٵ9_-ApkSEQ/'UO;|{>imȧˢq&ğ+kͿS8 u KkZtB(!P?C,Lng0 #;U/fM?wv_HF(q\>@*ڒDw NC3'?Aa}|z3-:F|>Pq*P*AU6@/=0ۈ~5HʳvM!^n6טvV+~ٮZ eH%jL:֙OϰJ7_c^>U[SKⶲK: BR@{&T 9tWS \n%!)Rm^|glܿii;4y L^ (=RqbU귓҆E%r$G1]Cv0'}Jg"GrD]qv01մn .$ˤ1&j=:k#IA l2!?o'և%ОZe&vDI5,/5Z0!W_NU8#f,p=qH&A[>g*e]PnS-} 9mh-jZE?K[^,Jώ*xk>AU#z.RfeclLw@U^K C$oj\^2*!ME [Ӽr+:P/G;|gU5EG"QP?~9>ݑ73gbAH(܌_w79@DbfpNVÅe_tsΉ5-8UmjV㕧7;ķfB4܄y?kJpB(v ;d5~>Wy?FD,"1mICxv=mOfszDs7s\'pG&ۊsɓՆVҐZl+NSXv4IG>t34K~`GI1A#p%UwȒ5ptkݝ-mH[؞M_8]}V@i0nbxlVЍ¬|nǰlN+>7F7ּ~cDW?"3oG| Kwm-DAF5>Es :}>67-?/9h97ˠɒ-ݦT48jXHތ{?USY^g+eX{EW>CWM/_c 6zGj_1aKURPFvݬԭ\L0 T'8R`' Z@-BM^˖[cV/\`qBtB\GdC7ƦΑgr5;Wo)7H"PsmZqHÁ~@#.|(Bl%:R;VKqda˾,>!w|f"[j#<9"!;McnJ!DPhX~"%H耚%ʰ[+|7A{ƒQU%h>Xl8_1S&6Ӻ(ʦ{V_7kb HA*=͐}mU%+@AR}Vx[?&7 SW@ ?M[f&<޳5 ?( {Yeғ6ZTp0QӃ4$;ڿj'ϡxU~iF%‰HwT|ek)Z){f- @(l]k\ P$3/n)IpXaTId35px$bzssd.nE 6нj_(勔>'P5Up:BXYkXF2&(.Z\Cԣ08jC:gT!B]482hZ'@_{-xI3/Nc\q+ :Rů=RMGh gW^fZs5kʇDBn=[L7 I?P8p sʞ(na" "ɟ/RD&nHuU>+ZY|Y0PtkúutE]$YZq7e?AQJ޶AM"c$a9jڀ>Eo>@ZxC-Mw$x07'~ɰ)(=JVdգVVQ(m+YI"ھSJo;GvTHxp&_̈́_;ji:rÿ7OӍ; nJG1~9 ϡA!P >JĖettK>Rc5|=e0ttS6#G4hPש:br;fF m,)2o-!d8gǍk\/6 3c=Vu\8_wh\ft+SLmz %tW%B:d! 4r_\hV޼FTEtlj *e<-(hu%~6G8OBl<0Zf꧊7WՀ '8Jx?7gKDȠЖ4z)ki'50Q&k"X@H5L./S%w"UںՆ:y2 }Dŕ?9N8A ċM;æx&૳WB1/$y0nDxH[O,kM9 ٗRFůGVhnIw,}ӋB@)?uDLp_ 1[V~t5Vu2݆Y(UR{hz ` %GCVaF xǚ7w/d"imcZl¦ʪc䐄O;=( x1r7WF=_C887e"у6k |v * OY|װ.@',yZsr̊n(ɓ'-JAR˅*F<2N)-ć(Q/ ضf|axO8e5J<񁣳 wۡ̄] x7Y_6&I{$i4t.hvhM\#,7P(EFVm={Ѡ)BŧFV,gA沌WC4vy*K K.y_o53aL |Z?߂؛Wp!q-Lg$UelZ 1E4Xݨ7^8ˑU ˄0 eϱl}F6;Cz0 ߳@3R2̆>OK\ȾIz ؠ#| `mpJl) UȸVu/Ag։=Fbu2sCdܥgXO($t#koq.v bsa%M8dq =(,Q@u/6I$03oA hٖ\h׍F J 6rS"K^xN4W&&Ƒd$Ľw)y(VJdE9kmj;;=8P \+"4>M r7V4cqLNY4S49\2lu3*Ԝ ;/>n/'_YYh'V0tyfqV8;x`eF `V^~ٯx27\O݋JKiA-$T9ˁ9X].c?F810W$])pԀAIA'Th?aqOg1LJӐ+Gv+@//% J}띅~ͫy$Xk0g-^$!r®)]¥F, amCżz #D ɩ8m>fY >ȨY򂢤C _o>!gi?eT~sPc쬉wtgj5 XJ%>*XrWk[D ʬw%Kw"'|ś*xyJ>{EeFynq|+Y}FA{yadn^{Toڂ4Dž[k P ^nBľ "7a|px񆸵s941K`/)WԅS^dٰ2i^309xjWVeE'uL!J-FGS),˭̑ӛ{ȭ>a\:U%1$hTslap "ei H| c / IW>z:Sf!;3L0/`UY3 X'n1'R0Zmx1ʸ4*#=oD"D>\F$\O0ۯ.5WÂcԐ)*:{ÖhDŽj!maڇYr}rв&@]: ڧp͆;Csƅ#zށ CwMn1Y4>cͶBQpeș>aby(?|"; -^ leNu'y))qYrgTEfzԏ p7 %MsQH.tк~>hbYcYp?3ks{NPDoh- rn"bހghtfӻ{KZ)yG1fXy̔V~MRVp;D5=CXjJ`NsB4E$ȳ0=s b@+,a4C5/~7y:;ow}|7g,<"rq|m!/JV=zӱc/..2t`)Ц$ ODf&G/p9),?m_+m\ꘀ4~r_.Sdwvs˥iC[lv48^%dD?^BH=h$-"S~M22AvJ{Lx;U J)4SNc v<"Dδt%fd{iht'| @3>fNn;$){v@~CɴK.PcZja\L;ߐG)PG0ãjm8jUI)A*?/3|emS-9/䊦CYM9yl 6']~|ګ[l`up?Uތq/8ձ8|bqH@?W/]*)!\̄1^Lȕ,i?)р穭 W*Vl4TH?~F*Ki1^jF/ !!,Kr`a9mq}ٲ;Š< &b4͚#BOt ׃EB0qT}%7l.G%&=8LjC1ؾ(EBB,홶T9u Z2kw!ZhNV'Vd``6q#R8--3ÎLEK@Iɒ}2CDcwpK[D;~8۱OިUplQ^L}V]I 0hݭz7:O]DÊ@4M$Ó:z7K447]4H]P%d03(+myȠVҴڒuț,$[b@ Qum†~3GW#/JDI3ru6L?_ƽ} e$ȵ9ŭlFaf`éwnZW?E`'/X5Cd-ŝ˄ξe۝ crv@~~\ >b0+\6߆; \]ܼ\qsҟر(6k׎H;wK0tw^]Ayne+pmɵX$~b'튼M!w{S)"r|q?i'i/E մ%[&0*>W#DTڤ^epR(}?<i`8W>KX.|+v>>7+@q'>vRRgx;BzW<ߔ˹H lǔ~9ۡ*vOaJ peX/?1S 㖥[urVnVNQ=a.>{;A1Ĉ, Kpt@6,Q ｿ#=J F@@Ȧ6/7<7,gPl;k⤧g>"Xv}lb?4G].2k fO҂Xܝ";`T{DiTG է A ]Yu18#V}m5>IVļU+-w6cl.|"ӗ97s NB8@TC w´,kȎGZvM8ý \)&*eW&/WiƉG5;'Jǯ~[>= ӕre \r ]^'0nյ^ 6HF6b^g_k `w+βM~ \˳[óʎ>. qUC׾28l7\# ;!W &*n,=so$XO8zҌN 4ȱxURPnDj:;ZչS=7;n:ƌ"CaJ+4@tVz缼oJ V~. ;bԸ|Spm/\ CR?~yQi2k '3ly(&ۖ#=qB "\z?WX,?[?wFz7wJO/KX J葀qz >v #hyZH;ٜorkrW5 rv):Kꯘ>u]6="v:*,#kOۂҟ[$-睻Aƾ{vB3@>U0(y [E){9 Z>>Q=Aq דA(at_N\׃f%ďטLFZF rdc$=Itc_~Zź755aCН2Ƽ- o]c۝8=G'^!Qr60o%Me/'uĝʖbõ ]#Lo ~IԆiłVWs_nimR!n|TZ`ڕJe82)mGpe m \&pd!z M ]`q?T.*yՋ-˹젽xdҹ+ݢo5چ jb{^+aic0/jEQу1XOBX oh$c0j7曍# ,nZܟui|\i{cq‘ybnVhǑ}ȪWY޵A,6ȥWG);}%:a sFdSA}ɒTf%GI$8E*Gr<,#1~mMRhĔrBʡ@8NZOJ#ɢE^!S:C6ˡIpҲ;Sn$1ȾdpMl#G{ciRl8խAy_jV|T kEIe-j-ۣ9}B#rǫF,f{/?lqk--%{߰2Xns75-9nOKaO+X7ʣύGfM@Goj-Kr@a.N*wYVEPy\Аnh5e`f`Ul}oN٤ªa%3DN-DGp#Ž]>ޟܾMԟjs֊#q19 O;˭JBN8rӢ X&oy`$=_/8| ,#ٚ;O+ }NL3I8 -z4z |pI?~ Ns+PgRo[QzZG/n[)5l6X.)9 &xo f.]#pZnHcV^r cy"w!a0uU\q"Ы꾷Òj^RҨr$d_#?m6B{8?+h&ݕɖh^!;oM/MRP~Cihb1G.L^s$g?s&2@>1x̮?8 Bt s%(=8G%]ţ3 $aQ6.x(?l=Ty<5/M묙m9Ԑt?,1什zyPŔ~%f;n5M"(0p61KtS!Z3yز3y_ɆIʺ)TPA5)L+Q=Ʉ̣ouEߥ1aEG N:1*͎tjowJ׻87(~jR4{105 YS[&nbqzY]o:з7X)ļΠxOXV:1kܩ$?ssϿpimyePߖT׼`[l6F] RvgGӅ1ŘZХ4%{%4ʆhtiX ޙEُ l#;E6Q4Og/6Uy$&~,DhG_[?g/~JP~)dHË|x҉?E#.zV(D L̆_>rY|, TB iJ'Cq,8~9ok?u~'$d}Zdt$zQ#]8B E1j..@CJuU>H~0G@lΐ)!hk)8o(w%_ȱ8T1Scb <{C" Z|,Yhp撍]1+x61aoUW}3)zEwXlD]G~VϝiM4s$k*~JYT0ELe@qIyYyܠGp8(n3H0tJU6Eq RK3hf)KjqjqPQ3 rzRh$(OiO4:3 TpN 8=diջxY^;%.U5 DLd#lEװݽ, (hFZk~pY`!J`ǔ/c \%Rzzg+g~Ǜ4}}L] yxY wC ˬL7} r|LORFCAJKr__Aisnt.ĺRM,\y^:֢wc"&fwcr sLkUC|IĬZgyO"<̪#n3ǶMo\bH~[l9-;'ۢHτ.:~ -4HFh'١oGiϞu[{vuj٣J %U\tw+~XlLd'aK8um ţz$|ܦ4оz2yR TWIΙO=Jj, 67nVJCԺl4bw(Tg_ҔAH+Lwf |ܢ:,]#% $7Gi{3QSwhH<0q1cehYPBu=}P^ye&2UEs,Fk25')aGö!vV +i%f ǍcܪN tæt'$v-Pjĵv8Gr!@]ӈii2gGBHJl_QSJۤ}0ӯTHԹ ߃k\R#Ѿq"`HLA<̪++l<[c{?hF'lc,vo%FvoeʡT1#VBb+BڍlNK(2Ka2*dpc.f*Eikx8Afp&.Y_֒04%!*,8)hI֏v䑄 F~(!Ho~9|NlAvxD۴AIFBE閜'Ȧ.9@ԯjȰ H%UKOݚByI(I2J943DE( XIq#Vouz>h#Uӯ6f]^'~dsR4;]PZA4 VR:%1ֲXt{`)x)ӂQJFO)_*g[jqȫ1%3Uc:aI?תb7* oWEi{QD{g3x"Xݎ >íS6ɟqVs؛f$Pj͆ioT~MzܲT3ۅ=Z)(.>#+W= @ftt/q= Yeoj #ͦ+oq"Cjסc 6S^hzkg'5ufNAFQIEF-x+GvCɏPlT20^jbQLVA !{N ht?ZXrbgDOxm3v \3Em5&T0Wo@`~Ho8Z)U|5d=. ׿f,iK.|'pb{TziB 5"nB[_6O5uJ0^Rbp V/cU#aqDu .P.Bd1$(N͟Q1(3]FPQl9WK|.dGP`PY䗬}л49p؁ k?X6$M@,0eQ{AyM]?!" wdJ5hmjN'f<3J܊W%ź%p{RzߣAfЕZCê=P\|CSij15bX1(WE(:VkE=LcpOj% .xU^p!n~tԫ gcH>4T?~]uDŽ2R4:|U0Pw&0Z Ju3/ʾ~_^P(~{!K .kDUрֿ6=qdJ…Ȩ7bTEU֏t-~ ڪzG/PceċQ\>*x%ΠtsͶݚÿ{"jaZPL}.$9 3)]+`FF|J[٘7lP#mGE)b|"rĊ|sXY@2mwmL^9+$b]\-zy΢"FĚS eC[Jd "a\)1ʽf^\F\Q} 7@r`QG,\|d7R\= j{$\'r)gz݁r/bY.ް̞oǍ_wbXwE;` @0n}zJ4g"A1e #mv4rP}Dlܟ9c,ۿÌH&h +G!0< ׉<8ͼ+3%iMɛIRZ&Ngbq^HUޢ71- l&9&؉Q G1ɺ"d\=0(Nٚj`fj VNptcmx40!UrX< n=|EOj-yYԷR*#btٓB~RW#-c'M T4I[!`\asNy[N[ϩ-1!Gm.ΕtqTSRDV5Xb,걺(%ʣ\4KK2 E+<Ѿ_QQC2N*"A?u nZLoH= a p와'կBc(`%э,!0F VْfP{Brtbͥs RSbCȵC9!>~()M!F,_~B7o_K_ؐ+7Tg9w]략L*JjdEn :cma6*͐DQ|/#|ƀ8؟K\wSEcVl^S|"Mg5GẄ($-(*g(Րj2V8y }2ISgh*Q|E8GANJO8tXzC,)Wq+ʹwzբpHERH[yJX>?0✑ PKCE 7 '73(XVoQ-C-SQS7K}S[b j,eti'axX8Q { E7eK? Lʬ+_ A^lD5mĞ3. Vze H[4b^@8'Ő[ /4~[']Gj0 D[U%Cdhk_ KȐ|C:(Sϊ J0;1w#"JRkqV.ff"*UD:8MA~S<mi| \:[ivY'h{ kk߼ 8E댸M`Znv8ʆuո1>ˁ:B_^vieΖ"csR$B5~ `afB50+j,PQyPb}tqrVbzstTk7d%IsƾmcDDDzyj;Ig3=9/\w"VncZO/ 24σYFסG64!z.!b'2J/I  Rd',HnzX|'8` hVGeU0A1 Z_=;oͧҚw{P_InKBJ:t{Hb˯ ym)DT5q;_ w'ϏhBm'R!C,y@:h+~_# 5mKH٦Ǯ;S}cVc0aq;KE8JHWFV&.=Y5N| UW>h7 $#L7~?fG #ɾ*%iSFП з.y1tyc`֬襯iuuf1ŁB,w9i&gvT{Px ia9Yc*XH]c(P*vlաQ9 -.o@C*h`;=n.vHy7s(+9oEy\(F<$ k !W1PUDBXW6/4o{9jZWIؙ?{&]ma`-.%=mWוTۭmKb\+n=' [,Y,'P0~vCBQt5OcPg"._R{xdп$ `fKrJ}ۼbΆT8™֌0T?HNiEۆxxt*~RD7? $ O|@=bDgyW^cp9Þ0hPr#ȶ{yU@9#qUтO\E~ѱpހdU~qQ'Nr @3=0zs/N,ݡ+&a=2DKDG_ڨoG)K Ghó9DƇhV![ xKM,dNy|֗cKLԜvmHվu8fD?7J#ULxX-@IKv!>tayؐ CGgpߛI߹$<5~ No92Ds|l2mpf݁mIeS+06vWT޲|Aq_͌KZg+tֲ^燰{1;sr@+ KpyR?_vEv PN?hE8~𹓫P}=$0Wү= q٣[f :2~i@IQs[9ǟ' qI 1XAch6=,$ueM<|gRVɇ~lVhCItY&ٷB,` 쓟*5}Tn㏙PL5 EQoC5(}3-+YILQH2\NW>R *Yۉn)+ W ԅZTU{TzNZ. y0]=o)CSQ*,=f疕qzMw .. -Szk4Ğ#i#?կX.ҵ jtmS4xcv;F^I',/ë ke$~~H2*k mjd\=A(L|TBNU1A|;ΙPp]7;[L)L茛&38!"HJj ̈́d^.[quZS4`f7Pr%#ədȧ&`6fDJ1PLblpT.͇G R⯕*3󨋪}yvq@*Ώ"=?Z*,ʶkXO=ho^]ww7/Bf2aZبb6ېT\.wݏp02؜Yn*+С @A  9P6[#ɹnGآ4gI1Zꑙ"dnⶦv])3>8i,h\&sCeU~>z`Jx|8ՌHksEK{`J4] u{)HDt=Rz ݱʆ^E/n=iH|P"#9f$"A>SMdve,`[C"&ϝG#Ms#$Ql6𳍤ޏ*tT3qJ}\L4TV%*YR:mE3Gw.4Rk,YhYѦc{c6)&*>:Or1}bQYSuN򐎼FUvh}oD{84(T׹ moo5rw9`K-.i!CQb0bUCA(/6QRU="[_Ac-`N:rU34G"@ہ85BӤ c HƊlEEq{<[(? , -i)>SP&c>7\µjG-1 BccBYTmt"nk+}1a6Pěuf{]^Mu2pY ,4`{{f 6L# !J2EL'&ZZyA+,^zbOLMXw%N8+'ŋ$fjՖ'>y^J݊H?$ 9Kt4W(y2 [ :is_*p]rGcX,E5a ޣ&T䔶`1i'4-Uiɬ5POײtGYDlQH]Op !4}bjw^O0K 5I)dKM@Τߠ9='ue)S] hB6$k5{(ʙG QNqtk:kn̈́\m5O %{B[yєO.!I_}/W0pBb9B*)Zxvc},O;9lŐP)řNg T-=x ,HYR2uqQ+%QʦY .Af@k[h8ᨛpXFǘ`>(as0C;#0˨4hOv^hg"2YR ġ(}v+0a{7߄yeSLt_VA`#~K))-OY`K:M*?AR%4u"DljtCdlOI#W(4Aj(!0B0pl3o7liol$kx6Gh7 Aek`HK:=da |ƕ?UTVė4vaϑ.w 1)$v.sw9tWx*E`H )"k^ @Щy}Ci*Vx8^QGTyfX8fQhܜ%LǞU)!?9&iu3'=PأuVN\hK}{IA<}`Q-8zB(='{owy"lEI'5+ժ .{MǵŢu{FJp湥{aQ2v2)C \ t脄)E_ld;k7IO\U\'dTÁݴa+L=)%YfСJEPdt)TyLae9;@D(B!m< S'o.5ny(99M-Aܓёen2xRN.z')-%YB!S_o Tm}-Nvjmp/6ؕnyD}+ZtL a6Ub 0IyS@vƍ5[F*L23H`|:`h#5Tv%ݘZNg w>l۩Xq_ap&۩&] QMm[t{~\^8K]]..у*;ENٓH{Gaۭz63-DpFqz8tUSW`z $3Ĉ#Ĺ8up@M Ŀ21A(pbb=KBZ)܊kQKҙ60ꈀZ9R^~ &d*5q.? xУוhɸƌ?\RYYvu5O+ueBAQ>>0 aAM裪*H) oc_Q;jku@q`ջ6oZSRCkImYt+%e(ݶR+6(+Wcz.X0upCb%Hoj l_{H$MѣzmL:Bt`GhRe6s|%rF^59r/RxBC,_# 9>L.ޯ6lE!(*ZP|{%gd->,A—[aRXuQ"M\!zKg<5WM1Gܟϙ܌>,O%(%[,mhj/q-NM#cIѽT@p#wC+9\Rncw[(RU$:$OnP03_YoܺN^)aom۶rx;\ݍPFqAo^0jwOV~TS%X(m`l> IeML ~ƽzL [7m)op?3pҾJ/|bM}Z.BĚ\Z sR`Nhmu,+ 9hyYi~k#>a0(/5JzJ`Y#b~:#r}cE ڢhtFBy56"XL)AMʼn{i[0 pf,og!)z)RuM>'Iƀ>BT9{5#%2;}v_.p6,:? ꃵ 'O!ɶ0md1x))Gf R)6պ]_9 \6n[lOP×mbN~+0^ECs|(m[ҕSDbTbx틈|n/2)qhS\=w}ۡ0KVs_C0p!1hޥgX[SGnkQxWs24}EZ)줳` oqvvEEbc_^~ـdSRZ|+zr) TnS(^)}4N1C?Bbb6xTEE5váWK 4<fQ*%-J-3@ZpOsRߓ'} ?G`*olm9r:t(>5I+TT|,4?c#ؾI؎0W]Adt5ބ FkE!Q?w 2 MW~@"9% RN)"`-k C@[7FTuxoϖXNj@{].DK{n q#,sdm4djY)S]c:͒P '.}CCm}m guy`Tp Idl (EvkPkjBb 4P0sqmEE0g#kfswОFp"=>w=Y -4u'Խ0nGC{dUGY `O5 @IΠ3 =.O*򞦯!f0t{>$8U)_,b} &cLUNy\gUSJ)Y@BSpT~6|<Řt"h7xhm"283IFqQrj`!EuYB CD޺]"QȰN-{^EfN&?P͂T)d^V oZyBHC;@v#;ի?BA!n\o^h>3,۽"J/ Y 8EFRV%KlbR84=٤HTA3LX'զ:,aw6'`JWE{`TD>`ӛKm9I6 Y gʡgC2QqM=,})rf!8-5!].>p`gOH+}3ד|%B: Gd׹&AEs})bࠧԼٵt$U =Х5KaVԬ8d,<@M,yǵkSa}r!g;k(ϥRj;ֲB+xlua3"Պ 4}^/MaƋL^v 9!VZAͻiW'7ly&Q:E# FЬ=(ߐdƸh&#Ge B=?4-d<ӉK3wm-8&Ag]Z-bǼ1ǚ{7.TV~L0Y ^!%7o~<٥;)@ly*w%>{pKsxǩmYbv0-qI?UN]/| s \K1~mq]8'k%wuUBYunD$6AQR9#! 7G/!AtP&=a-y߁&?ц$xeOgmPUfK_w5 }I3WBpTL(zze,vY[jgKh GBsu"7u;0ƃ^"5 e, ?aglwu@gU 翏m'iVP\=hG\ze;f9h"T%Ƽy4 <OzJjd~0$Fo+J2\qOw;qnZrg9z54Uc_ C ،}L۹{vT60PxIX)PGa5 CMx`bmaMh:]8mY-/RAvnmK| M6,it(-Mr{ڂZp"/\h/99KX7_nɭVY}0 ˔jAQX5@ŰvPU\ppR^fvh^W1ItV6XN/[杆f呱vfSJt2wO 0$GP$u7K TwEߙ 4!s!^XʍWtFH&N5t9bU 456W wub[t;TXuY:1/s {^r5>3zSG*6?W:u[u yv[OpkcؘpKzt4Q GIZA[v;jx]9nf0gJaUnڞY@-7lv N\E?)ɁVkqaW)уE^Q>'. \j%$cYN">b*0YHH3W%4#1kB9IqP*95J{O5Lf,;C\&A?瓢Cdw6T]ުK#6-=1N"Ϋ.B'.H@X[/T_3#o+q`H#~+nQFopad9L 02O#݈7;z (/R>*'<%[sW hfiy{٩OR,ӥ鏀(>\o%2gU~zd1HbPV \2^ YK97A,!sL9ٌ^Mg\i-4LV5, M)]ęsBuq~_̵}3óab6puƣba_r<ju a'd[c)@okңf;1Kq+cD^fBSƒFJ%BKKVɆ9HV xXÊ1yXag( SF(f6vLUH(H6Gnݢ{>znhs 5fpv>lK;oU$51*I| Gf9 챯E_, lguGN!n,0}D#r c,i􏭽$>Gj}:A{ ~R豠O+*(7aea:=pxzsғ7Y`^7&"YP yȄjY*="(=$ HVf3+ k[m?qe1 ?liS#ťo=]vRho}YhuZ;b: OXi*{2*[zYa^tD[. K-"O/f+lfz {5hXR^xE/yV7pEkc 1A{ujg.[&_U}5&HT˵Ҝ~>6] W"j!qO|K7 ,/$awQ{GWY;J ^K$"FJeeo4d&I|`[)_4c0oN;jߠ Y'¸^'u9~߅ǐG.{j78c6l#߰ngHdӤ{0>~tjp`BD5xpzUClMJ)sP;b~z=(0(uá`+fR}R &Mͫ*w^U4;vD5AKW3ԘpY  YYA^.>4I:a ΁Jn8A3rTk@U!Uf|w.g-t2MO->c>aI` E3.gC}5o~U:n{c_ WBbJWExfc3ɐ~1 6T^/Owok㌮jDy;FAtX&n@0pwGNP=Ql] ½6eh.sd Xzxhû7o97H Z:y ο7+ \y''*u۳~Qo@h3څv ۞, Bc,=tS}BGUl1\WCgsJ~WfE$#m\GKd$OS*`HA4ra^ڟϬr+p^:]:57ie_m:Lf , IXFCEb3kCLZ.8E) jW|VmY\,TN~gJ!5b0HS+xgiJyL<˪}~q <|g.LDBs)m!)aHjoC݊Y&f(/e/(6#J-,%soAKxHBAWT5~ԥdN.+Ӏ5׌6H|-01w΍|zb PeP4pCEEdgF[Y Ck y˲|կ?`,e]z`XL鷧 א꣹a BdZxȴ ys<@o@, 6}$4uH9ԙ3GbOn?X@k&+X@r {.LOrssYm_rn$ډ\Ci5ٴ@k̃}]OL&ed"}Oip6 RMc ϡM8u oiK&7+~AdFC/\*Wn^ٿbCor#XzP3A:vT!L5|hZQu7MI}JmzB闁UG<r D6AA~y ezu,Q7N-`tJM 9/i&7ZEůU:tӛ,d_ m? *2B1\?s'R*-x@pYX4F#O(uՠIZzbthwR8ϑZI֘e9 WgP(9 $5Hb#9aVt{Dhg9΢v/)<WwDg_iꬽϿWq2*w4i]60*Hv#I^}LcqJiHX\,x k6g2}ӻu@PSar\A4WK.WwK0f } Av.e#:@UdqV[2WnJfc'ԄZǹҸY>Y[D9-%y|'&[I9j g[-a45yl{QoP󗋁e _2qO8w n]Z㫊)a ;Q cxyKH`0D/-r?E(׀@1R3ʠ1=cW,] K ;vFӓ;U$,),5 a ?^pA.7ٝ`0m$)Ul\[ZЌ 8Ｅ#}ƪjreBV^TAB%_C VϹp&|9]$ӛ䟱qz*wj&덉SiBmX^q|-mo~>Tj/w:8xuIIq XYw`Otٵǟ@.d/p<.74ێK@Z {}Mw՘]NYA= m1~ b| n Ib=GɆ=H]n&ۤ¶-,zGS1`FV`˧F`BC@83X4bRF}Wgܢ10PЋ @g F(J/^"JsZ@s2 TzxdZm6<#kocI[u3wJ-2ٓC#=Z6'tT&zO~M3ir"kY)sgW8z˅S0ԾS =?mB1gY_͜hw=l!Ť͙HW!}k^B /]+g7b#;f|F\c*F+/lPyC#&R4\̔s?{vIS6'1BX:B\>oScCsfM&ڒtOt l+M:?V}Qvm4{^1P@%(CPG2L>aD+ )?S~_s}Z^7 l?\9ڂЊ`w}م ]) @|s=815<:{Ҩv{wH7^G.MέkVSV[UmD |Z1Ld {҃3 =-B۪m? gC먃>G `[l&Z4VHpi ֝<ͷq_[_F:ń߽miU k{ͮ:zp>V 3)#.}=kep9&>+6i{,:3PVfj@&2'LevEq7oϡ] g͈+MԂ,,u$(eSO1%,}^@ |{TXu?Ӆwf2d"^U Xؔ z iCMmWL_S[k_k]J10e2BOfuH94y1YSl犸'$'ٝAPOӟÆĘgM熀NG~8f~#WȞy3]Γk.&z7+0q -rHLn_lhg zvɕT -`#AR}g LJzȄx&T.x4u'(PDDiؤ C47Xzo-Q.d&ihw=Uz,Rg^`ihމ]4g:|ȳNr 捷'j*Ը߀ HNK D]mg:VX~f hBMK{$v&՗'X0]<'t3MLDcGD됍,ҥ-eM4d?Jg  !uHitQ^zUO I7&^CRy/5\DXKU|My 8@1CY.Knprj ߼I 2jϫ Kܠ'y'/P9:~̆{2 kP]w(aSVHcfZTM՝Nއ6"&C4-fJ0W1>ڌPa|>8YvMwMxLݖ  9Wrh,pa&swGQ3A*gM V_Ed!pb磱ȺOz_F:T%/RsZC>$wP1G6{,1%(\ƻwnlE?gb=wƕuo|cªW[{YzʯLEeQ*aB~Sqq#LN]\,1(M0tδu E!шo` b-^*YV~ʈ,3\tn @cc!Y~/ljO ˕t|&-00OdBlw7?8(aUbxY d_4C[>mj Tw!!(J]wF}Uz.gƍY5, ؤ͏I2H3Ţ?cz,E 6%Rr h {C!"(~3Pc(+FlHw 0 y{êqBmӶ*m!*$/*IG#H SQoHŀ,= V6{Č2VCh!'#] %.s߆e*|Kr)z@m  @ iK+!-[w4uGQ Tz!v5eWXTFzKwmWTyYL3+l^}ω^+|ܖAcfp>gwS"ޚJ>kYC j|zHǛ+2Oyd=jMi#_`C¼P}Ү'[MX8?o Շ?%X_6fF-W8Mz?>CHH,oS<^(!7I˸bmg6q>5vH걯RaT) 7L':z]pM>݂D l+clu0U\=K 9ϥiՑkCx?:qͮIHlgj:n;sHmD4N06cquǕ<%>\ x駯hocpNRO<оb߂[ci>nؑORPy{&Ӂ2bB NJ'blcv-xY|O@R?E[)/MP1e+&c# 8sّ納: smgYĞzm4"$Zl&v 3|4leƇsqzɽkR^ Mt,bq!uEJX& }s >]7}r&G]XRcجXǨe䁅9Pr >5(o¸kY}X@N͏wz? {Q 6=j![ ˗zwݵV&ujĽL 1-\`[)TlZDp YKR'+?PJ\+ã h$s0w `vfǛ0"{U:8/_9]KS<(Z+/bv,{ѱһ(Ff(t0y6\a hx%E6pe1 F!ztvHV9нA7HAϩb<V37 WmZП7tōVKlZHH7ر8d (ߏDd0A=ۂ)A̩- W5Rs\/wr Hr1Y, [ymOcAP3P4&ϱCJŮt }BL R\MޅXdR&|"6?'Laډ:hy@bƔdYpV&ەO@sx#>Dt$BcC 3oSYJ::sD)ʕ^t!Ŧ1e.ɓ)LkD] HEiMC6*mֆ>=:69B<g. 4(@طJ P438Kp BvlqkSܧK+TR{ kWxC%ZhvtJWx=R#aʱl% K ߅Z ɤH [ b >xEGXyj-*׫lO?#dwYk2N(/hʋu J8 AhTxՐjuIúo)Ps>צ=+Gj董#O>Dun$(.X"iSN_EOߖ2aKﯚ* 0?2ڳeWqo-8Giq[~8qۮ6OڔRtyUn |ƋxyMNs t?qZ[F` hM Yd>>e|1ƍ Q[(S-fYQ<^F$f7dI;)NPu?u%PU7F1PH,iÕ;,_: 3$:EhOkNS\~K=IFr$ .>)e֜fMX lOQ~-kQh 6(w~{xUHBg5P<. Rh'bNԀ!US/PU| ,yl-E(@ *kI^Vv " 3)iWajlPD50&gPj|˿. L^x17_|Q$$n&QsXDYY'w}~v *Z :ҢDkS\X<6@69|#gq#g u<&ЈTǬ- O!= Ay㩴ǂqZY7X*"DM!E\81wpiSdpzh521+)ʻXe3i=F]lI 4_tCqȊl;e\8# 9lލskg>wCD{; TCV~| ˯ jTR 'gHZ>Z 6/'td~ ０؜nxҕPla0sܙdũ,]JZSا߈v:(L GLygO] uyye.WQuo4 9~MQyh[VћrPf[y˸͑vf;Pr]JGՄi+lKUg<+TW,ۮIױ @iV?jmWvaXz+^}g^WhMT|7̨A i0&Ad`%s=TZdc#e7l`W1(' BM>L dM.mQ(hZVQ#gN.!i P/vY5Բ?%=dr# ho:vҽ+ʗh^̫y]k:9X1OG)NFn @)e(tYޗ榃cb1'f?;4*7iT ˜[{ lnD-gר" yH?yI [O+W<B=؛}""i~`;\=iH~R|/x *$W6!Bkh wюf lũcYjRlk=4K''ӊmwteQ5{Ԕ0Cf? Dp\tɋǬ!(.WɌ5cG\=t-K_=IN}B8_͒3Si8}]0m)P1EFCQr0j4s$[`Yv0M=#%"o'w m~E D*Ps7(iNW;IcuW(΢Fzrֈ ":w֠Ep5=I ]R<w}+DfR=2#V=>`|T-4=|pӠt6N`A6:*xy,L| ( %3-n]6V hQh"c%;4y;eNxNr>6IY>WB~\vܦ@r ^p!:*;%! 1y:`QAoдe6 ^}ܝo6 AOw?#ηh|""͜?~ls%SwT 8nZYN}ʸXM+?K ks@p2 5fD2W5UˏA{ q~Xpc[~ޔ 3J'F>CH{ 7޳-?~7cAt~ЗQޏIIlVRSA"k:]|W7: !G/q $6&f/66-uvhC?vod)NWҜO?Dѱy6*M2DdWF .$*37Ez7 =zb~Og^˞=# 8ȑT/աDqĉ DC_`Eb7d+K_DdR{ R%,uL(umiId)3-KhOp0 =3~nұx6 lCQ:T"#P_>f8Ziݶm3FIfHz S]u!~hUw2wXŇS.s^3<1s]3c*2iq01u8'`V(vM1 6 ˔̱"A $L'Hu;/jM Ewߺ UqԦQ1EتIz+Nhe"׶d`+pZs/fun(k8ԱD"?J9o_VUo!77+ tTnf}HS4Ys#`] ])RM;"l^f*U0b,fOa-|m6ufq0qmW7®~f%q?߷VSk^tbޫ)P,hE]m+$٠偏!%[O,(xWb=r ]Z ~f„\Q>x` ȴϨHn*#׹ѯ}ad('m{WJHmL}60_['F+T)LXsFo.mQ&2 e 5 @r9CM;ǰ!D|9@j 6W 'ߞk3W"ihކAzyuLvRa-J|?Y) s#,䄌W8vo?ֿe' =__}ƺ+9AyV@#{iyBut}l-ec0PUuֈ"( tVeTz!D 140Ac#:s%_8RC{GƈdLexSAakDk"Ju Bթ_d31#JEa:gIb6ݬWGإ[5 g%bn3;oyQF<3;Y-%;O;Ci)*._u?*?f'[Wp ;uݞ2nO߾Pan=ԝF$%ע>sH%4Fޫ}rE U}zԾϏHH&c~.|n <? }ANGcl3Nͦ3,E&ZҾXnI#6چzEdoָt{'TVI瘵2h܉Ed1Esk|{=3sBQg^1ff%̎T&>kP/` Y-؊|,yvdhf2AIV+MU@?J%*y$#%Ѹ#ymʜy@9PǘĎYSS†ZWEI)ԩ֘TE4rL9CئCsC 8A;AΌًȽeD I$F::&/32qfn?A `e,P+7J=ep!(:  #c6ǝT^@ܯZ^}IYn+?<+54jqo~hyHƶkwsg/+NLHjn([S=sq,ۦ0'LJ*Y6Uc}yn<SQ9f&lVƨTfvc2QQwy,i[lũα|i +3 @^ňw %%lGjHzVgW/q н]%wV|jz0^!jەCƐӰ%MW$|ru#;]8&kKb܎ .Ph@pe@x#%3A䲿X'~qru'0PZ%_B!By:ep;d߬eϮ6eFY!?LivGmp` Q&ڌoeOz,^IME\0+NbupEx7XxONaFӈqUX7`h@rѓ+\'ѼijYYP`&&o t;HB!mʗ 6+fDl94Ky׈(7y'v_*BCƽ7{G*!:flҩf(x& NGN&N}/Dmnt@ݛ3 ēW2jd $8ުtAÓpVnI!Xr_ A]XՌ1i4"f? V+o@~cnf ?SqݷTԚЄ<+7JuslٶDԓlq$Ap]Ϻ` ޺=: =sx6pSJ훸v-?ţ:۫,E{P(lGnZrY}IZ\̔9%|wQoJyWw4g|!r{nJp,S3SϡK% IVy2.9VD3z#o>vp8 |<'-BS6x CI(Th)Hh/=ks")n 1#[M On5M2#s?2M~X2ZF9; 1Ƌ?k3r'3A_3UMˋOKBQEzƪd| E+ <+~U E_D%+k4H ]8V ,k9QR61n*/GjN³r %5IT4 z=R8U,J&7dS9Tr$[o/ /pG6+3{;eIBR3o_MFxY8].D^aμϐdA%QJ9/f{1Ћf->  sDzGխ,ϴ/Zrp!gSc.2~':) {Lbw$&մ6# }P>CTHrx֑zV\t l8=I@~>U$n-::r4oCFR|\e P4EIcêz$U)nw7NOnyhPgu&nF[q-Ko3"feTZ1J]ET#ҍg JM&`_v2w}|ԟ:Y_GFBoDtE.I`A¯;.>hV;:Srep(#{,T 21-?~kf4 :Ȗ߃_] XH']Ľ\'A7;֖̈瓃[Kj6ݤqhc< r[Gn:7s2c0o`<ƧP?fRuă(D2jUERkد{x8qeK6"Eb з yj(;p jXH0p_i5Lu z^C;9u"i WU8bU#gߙ"RBK^X1_?Hm7o LMl6A@܉|tppTE>B_Hnf'ewm/AH悱!dž~96q&퓛-.6},KjSt0cwqp[ }GGl8MlН'Q/xێ/Z؞R*ZvL Tb D+fU'+T$& {b T1Ԍ@)}if.~`W r6#A߇Ems;{qerg+ţ ׊< 20*RnA9.oh]>y#J ]}$葜~nD pq AK/(o{e8_|j-N9Q\ŋcgIyҾO)rRw2#i!HvR۶jZF74A蟜iAi%Èxpޫ孙L[vfv.w *3k=YPdF*'<5 =C!L~/:0%HBt*uN(l+la<"$)'+Zsp@=bC"[e|}:G<0kc=nyic"R z@jS*Vzos,o&S/*!#!h$>t"݄ ?bkv%T! 2 E+*uIfbzM%3k3{LbP~* p~dn>֧ j!?Izz[=0!)qpbM)E(3t&G-ڳ`sZWHiV]8./+]oXoEƁh^FF;4@s{.Obxh@kk6C؆1ݤ':mNp6uzC~nn`We0t0I*Gi:|Ša֯mha( g"ׂ@cGI672d"O=inuF>Ao-W|T׌*)feW_KYat-b0ߣآxoXf,

)r&IT4* [Urc@j ӁmX&̵W!2.H/ XO5ivX%mY_ >{bvK(ޒir/VNgH(,+ S08_pCxr!= כ ^d yPo>[̆Rl%0 {HQNNcbPӟ!(I7yފh:1ST +m/V*ӄcLNBq H_^Zx6`JYX aw e`q.\fbq)F'%ܠ+S}r˺uͣZ_cԷ @QËvJ[J >ZQی#->`, ޜ`+*ŘjyQ{=N۫qq7"Y\RnofQ@3W?bRYd̪j#jA_BH#rr (٭XH80vS|E@6E\X 3?4?."GQ_Di;=YZ;N4I8/ r 9ѦV/G Xjl | 4s3]Uoq}3Z=7YD; PDCb73DaqQE~}!!(LyebYSCԭ O;ɺ쨸`a! WY=wD8hg?`t:?oo ,Q06e}1P`qQ?weyhBKV[E؃k{:Ms6sM.6dA%H:)˄X*ʱ? Sxωx* 2Ied@F~C4IΥ'Mu/c4e 7/]^T=tH 0\#X[rIɪ |Ak(F,;#@v;0ݢus=+ d̎EpHf@᳋p2;w[=0= nVgp|] de޳|,"$?HL&!Nj<`V{m]2:XEQ h:*&ڙYÈᲚf<16TF"6H66X\7[Z9sjuuxʡ&A&қCM] D2<;5kx2gp+:K0Iˆ'73lT Kh>QnAn/57S^VndTyޒ=O)Z`i2 ph3H%JrpmaǖiސeJCb7*@+%Yg7),bgJm֗(=˻ķT0Q'!v>o6VVjaZ6JWh9pnkeSqqE?vS.|Ăwݏ7 k^Θ|O+Kv/!Dn5Tw(cedޑ*;_;</De>l3Do΃t:UXuOR>zg~:+juAicNw(컨(PKxXn)d'\+Pc5(K nwHsO% ܽ*zRt8s#yAH$87d[k㗱PMqS/Dy]U#*IB XƵ+7.zMнaQs3%b<(!t+xW箘,ҕ.] ωL+:a4m6~(6]}^"c-*f-|R`]W2@v9z-xjɋa*ۙ|xkMr(Jč,za6Pi{v̈́;X j+g˂Yjq?Jbh!LoD{Y 5IWPih/XOAJhoMq*wzu-/p뀞aX8RDRh53kY1 ~AZ;1\e0EU^=:js/S#GJ>)iBl(VP[N@0P3vz,okGy,kLzXwPvh/g橻 (>e~;].3LmzI-n&o> .ɅܔO'Zg&i&"'日38H7)znVgTrk=PNdS3Zݾ܉\_9-ytg7>3Ƶ|CH9Ia&ޑ^?2wzfE-%|_T-84 Qx"#aHs KK|!'M4ߣ+Iy k zP4I0mCÔe|L16XQ4$X! Eh,]㭅B3?m{'z be]U#]#q7[Sxe-D5K>\ܓG5JD:!2Řp&MuUu^RxeZا2!iI*LoT<쉄GLjV7GRx{  b.!~ M.X"@}}ۛuDe\% LMb m'3 8$Fk>Ps3\> *#N}Rji/) dܣBKݏ5t |Ark:L<7wD툧:iP *y+l"dLkF176_JL+,2ilT0~mϧ4%StZoFf,QUC0J3v %pf%_ ACm8I5WZj{neo#Ǐkɜ#O2;+3* ]m>'I4MœV9IlfeP>kn*%k=]*ijVl^J9 Bh7'&sON$C}昡o-S@#ȹEUj8ŽT.I)=TCmGA2}%Sogo"KצiFEnr-TM% ̬ҋmaLH_þ˃ 'ٽQڕ_F*"SʸC*܊a5 >e($ LȦV!tJEZ9&] GzƐafsu~t RNMX1i:A1Q ۼu)!rwE@PU3GBO#A?L]-[qOvҚ o"{ BADR=<3WY뛧)Q-KTGS2h_6Ϣ+0kGFRJ{xSb+yy5ĝt Vf EZk eӉ}>%u奎Y<="(۸ i(Ws-Ӝƈh@);C>C%n<%m$y 綟LH[ϹaP iMpķ7lZWO~#t2j<) e.2AS/PⓉbvMa'D \N.%3($azs+¬Ɋkb>PT-Q 3 Qsѥeym0*c=c۴QQ@=!gˍʘʔJ((y!uL2%XD>9;G^/+v1ye7M*rz`*o4ܰu͛P:[崆sg@e*pq4;0#+B|1v%N}%zdw`i "m@lOSO AĀHr#bII؎qrF"RijZx; `BR r(Hk4#¸kY`GѤF-)}ғkeDZ^js>=~DzL\)߇kZ_ۼnk㷀Hx P6}k[<̣bK+^G-nm!?xϏy#iF`D@hu\hZ~G-\Gwmao<n٧3Sk{͔HK W @/ @՛`wL(>MJdCvb]Q5@a:r! =}<9+Pz|MK 1gr$?7_9K]5n$RXksާu r\XT^.ssDi H2辎˦KN5G#Z:މ/KzrႫD?%x=/M;N  .^+p4 Sh2ehl/;{8ZEZknPS x;=I1IpKKdt_ͻڃKC;":h297$Gܸ@SmxP* ?_xLK5ҔV|]c} Lw?uKRdG]#4Xե;&hz9;1;m]O HQm&C((k,ly|()GfwdBL;xңMzЀ"Jc"B|t Ȩ|Y;շd#}'=U5JPE"Iߏ569fsDqBȊ/J I3fرk#na$^0͌⣹$9؅C#GePKiJRp'7Hv ub!3D廔?!;/je t P\~vKN;'zolY妯x(eorNvl:t"BW_;uቱ=i vᆈRN06ܵ?^A\l6wr{!B/Jv3*EOh3J2Qwz6֢@e^Z3>]Ȑjq4Fi)*%f}1o$28N ۨ0I~USkLlbŶ(LD ｕ0I'#XR*HW6!C {5KFvL,jfc1g'd95BbqbT\R5!"N 'tNӸ6%?H4Bdb7s*3ffa)#SϯD%M8a-y#/PL2T& -skFV 朕]n:O{,<.WqS\h*^/[.{9!Eb@_t#ȬxU]65k}3s'#~IV>%g,3 F^Uǩ?s(t2yP6,|Iz*V.L(FZO7j`!3?y~_Hy;o ;xe馇Ѿ3K3b-[Y`hcH5΂t$'rDw4ͬ_$Xy@tbl/-+X+00݁y0s(+oy\Tqt> ߅Xgr2Zct.al ٝC^z8 )Oͯ<;(2|obUU/^j+dܓQ,7WuXfKJj^`L+76djL&/UWw:_-Fw Vl{( 8b_T }V%gщOM] ̋@xPqO/*4jyOcbx#,'xC8]xY=0#Fs^Lstߖ-^%IE5OGEho h@-sʫ5&G._qt-^Hhۀ${J,*zwJ-IPr##';uk@ӡ+ ,Xu4+dy}oGJ5a3P&Cub>,cwsC_ 4Rv ~$50{cNX QeIe{&9^h^cM縲ɠ2X#f +WE;pd6 RAlGo.Jr =x۶1hgM#Ƶ8@wT˩C"W @*q?%(|Jh?TL=%*CY*R[^7m|ry_,2Ԕ\p DLyHKǒHX~2n@S<ŜsC>͞y2r}tC7q}S9}.R17=dT\c,*:> Ag4,kz_N12i+f$)z`\˦DK.ToK77݇Q Fijw0!̙:Ol3-!\ӃG#4 :DnK45J"ʵ$rTYmJ]MuU?N:'Y 8X&>|Uu7}x+M WCkT$)"]D|c&i\PI0U`tYOM܄MroJDw QZ?$axc*Âo;`^,>Q#̃eK%%;Ax IzX\6-:2 5c#>g1oGjO. *,3T|+3my׾F^qQ=,=D5Nfd6*4]"(c)gph"agQG1qkbҠ쇛V+}EZ2/ss=hPt9eݟZIm1(CC(܁~#Aq✖3f/gO}Is{3S{s}E4?'vvpppd=Z^h1[{*fOyTAZUPE qP[9/2uqkWt@oEO@JEB$2i#R/wd(Ge8}s~uv~%FW'W#>ުܚCYPV/$w(/gka$B-TO 9Cf0W*) crqj[+dۑyCs"v50LA.&--ds-*†JL/B!;DQMD`AQHF $t#Dp>>mĩ0J~NH$qrRH3BLRjViZƘs Q^ _z?:ƎjWq8]LDrpDߖ*ɪ:%P&Cc'nHv n> dŲ/4 7Mh* 1AL2z?8{$R- LQ!sLeuAo ,3bEZQX4-S?=^\{!كl؆cummm9,Om1A!ōu蕔pCd߈҇iUDFyIq[Zgl6=aܙk $zl :;Sfizydh ApGOH y) m5N-eusy6Z8$x-{OY+zGFU@>;+&ZE beA\)^hq!! KN&AA6=U0|5H$rFٖEy۝BF9(μLb0:p ow.G`yD@ h Q$!J{+Qqh78E 0>Qi~zBPaeC\Zv\%mjc) ”ps3Hd!&A Ui^ߔqCZ~K$ _z^/w HRba 1%Ib{E|G@O UB؊e쁘/X*0bxwߌ{'ߌHY8&íAh GWKw:b)U ve"Qc3aBzcSu6R2Ao5&[S̺:9IQakȜA54:!^ kS9 R[#!Z.yE5pf:jBXvgC>/J] a^"c5zZjӔYCXXDx-JI{ t2sdӁ-qpaBG^>usO@M5|ZfuFna8&2`>j3=E4XRፓ?W5WƸt*Q+`Q/&{PP K&mPl4q  ;$:C3 +v2Mjûs2 l ו;s}$F-xG[.%GpT޾__L3'B%3>ѩg 8TL5C*t]tpZGi [QXCF&ɺkvy n9@cVbL8"=I!\N yAs62p!:QʻAȕ֩2L?q5dݕuhZ "u|Γ(tڪaMrZBJiS97K#UAQi1a4b3 )tR&5r3Ly5)o?Ly̅igzIHBpk#9 JwR=tDm&[f?h,KDRqX‚;Ml9#d;rOٕ#]LUAtjK; k p;]>h\}"辑drBvmM;['nYEK2\\1]Aq^T%[DŶ:(i%Iӛg wY)^% 8 GY> Hc!A杮S8Nx֒SI+)W\W-$_&%+;eBgహZ[)B]0 :v]*:f4u?'{߅TyZ~J*IPꚝ'tbZf@NyܻoꜸxzQ:ۋNm 򱧛 VvGt|P}DƩ?jgJCLЬ"xd;YŧRfVkZxNkb uyvuHC5N;Ƭ靼bj(!]&-p(-ٜ}WQ(s$ m-qЪmtc>#T>h|CBʷrZЎ\qH8Atv?wjۖۦ&?U6OUls`OڀU5mޔn>4qY/u%"v>)T"a/ATlU04Ԥ eNr%Di k#"cE٢uwX9>!B7]>wCyr p􋚰+?փ8vwW[r*"݀T"5L=`W5]S{۽xEZPal;.MjtJQJ@'y9_VԷ-'fe>SŁ߾ 4*:!fgQU4%nIvƤQ0l:| AgtCcrl nT&2.8^3 zt|02OaɵW5c]ߨ )nbr!`PPTLabZ-. ,mA> F~^Da^'."n7[ZW@Z]g;VxԤyNt%*PO\ϴΔֻ#Umz&ƗDǾQs )&9ݭ@6I%6Hwh8Y#D#1ghi p ot fpbP vXmQEMjR9{ `@.D8;L8D۝yوO"aq3mɕi".*$];[VvX=S)B+BUtW ~D%pL*wZq*RH+FzhBjX͇8ᴆS;>yEGwbW'}vПC ]k>pc6una)@mnyJ8z&gcPSV k|N#Z W\˥> ަ)>/5!ah+(Feo$VLXDvU G @]fhdu/`]dyI 5P|O2}l.0-gZvy +`L}#Xp _z+&4۟W;Q7pffBCGrb 5m <52BټS}{IE ;{QS})E5+ɸ;j9)FPU@FEn:[֡-Y)xFM+2pbFh5S/ĩZb9DzJ3WE>ѝ\pY2%)^lSʩUo`jp啉/Ra j\:Kj9`كVقj_sSRE>ۛ\b[3#`>G#TyJ]̑ \+ P\ax%nm\Yk%J .4ԅ̨uX06/c5.Y¥V.( o@1֫]gODJxꩠ" 83Nk hstG!T` R, V^'L:,\qk$;Y! rŇHaA'bjz HioAU/@!)4|Ю8JU^mI؂a@M$0xrt mwx3/ڤ*el".kTRףypArht cޏ4Gq8>ڪ@7; 92;T_)?k#*WW/hkR^܍K{A84.sUC)gPqŖE bW|Df+3oO^ =!Bݰ2UVgl i'ڞhx`٥"YyZ_?ӎ:rM p}0S.yf;YǺ==}UMDz}_D=5*MQ]|+.O?xs݇_@4>Bx̣໧b>%2hB[;E M苵u@WL}wOq[wmknNwSbHԀs;X xWڬ`H`nw&h~>ݓW|1Jp<0 ƨE;*bev$[9i9ؖ@0[loۮ#T7B#=Y0g&40TV-ŢcAޯJOQ3.?}>AIWK\A(;PU+^Ԅ z%zmSQ,᡼9B'd6^0+l3\oôJΠu5x槽Q[P`PJZA!NQ z%|^L,֓[MZ8 H7d+:9]x-QbdeQ9ow(Usqg hJUdW 傣0edw 1;v ¼Ah":BgYj=kP=_h]i\s~۞ ;[cM Y!:/M|xHHOC2Ё Y%KHpαdjP:-6if4jIg,Dv6Cr&B1^(0׽GΛE].L,|CB߭++Zp S&:6Á;FJЃ8;E<Aiz\77d2J] nǵ ^ l`ÞTs4ZOUFQ[R0ͧD4|%n6DVM!+N6ߎLc+/ǁ6a ȮG rcagbI1 x_.y«=g9%C̘?%cS=;8ޗݙk:)koWS75ona^2Zm~$.*Wr+NEsg .XM|- 2GVάᡐcKؽV!g$soj"Q?ޓ?47B \'MhY7fR zѕ70O[> 4Zj3n_5&'e>51S&tf#7H¿)Dp.Zul324Pd3naλ ݾ|weoP`GoQKV^`aW")D0M8>KiaUj 5S\c?wp ʭ^V-uM J*x( 6!QǮz?% J;z6,.i|{4C+m$8noU*PRUC lPj1Yޏno{d*7QlRO`j* +}ۖ=#" ts7{PSʨJWFe h⚢]0+dڨEV"t>0 ]G.K3st#-eF7a[R aʝ+M]IR0# 78ӯ|Q@xdaFm4UsAWj&3If0mF+gPBY$#J'4h]u$ܕoBC1,| \L4Q kƯbΰ=MZ=r;{T%(j[r:M{j=:וR\W -N@s%wG7 `=6BڦQ'1vbX阉yIp[.ߓٔd8ql1?kp8(V1Ee.O Ųl9̱3x+1z(a<Uě‡K{?`wF+ CkŋӐ:I9wǣIz[1˯(@ҤВl$B `&,:ӹK s([{KCQjm0T2o#,(ɒ 00i\e0/vS*(Kĕ RdK2U%8jy>-UH_mM[@ Ipi?9>rC1e!\|~%$nR0&oGK0Af7))FDjl*ThI9(oHl\ݔҶG; ; (=DJCL#A޸Bȫ ⋹KcJ$H4LfY5ݖF6HkBC&77.24#2@{0Iv/RRHbccdws{bIX8Fg ڜ#9DMiwӕRGE *fT\uw|<|j Tc.j'([a,die:ȫYA`ADNp|1Q}1Qdf;xSmUQl,8[1IyG@%>%>=C h(>9[\8>;ٖtq=7υb߯ 6dT"iD#W!ޣ76?[hDv=pԆ%]kPRn ϭ NHW3g(,\s/&\|L  aN)Ft7s-?hBt{Mk%4ӯ\r@NT/lXG|"6]PTup{! w[$oyAMp~Aġ0 Z֧dQ.Ќh'ֈZJ,.sLD-K$Q h. QPDU/EyݔlkuݫZab߳0IZp/eH7&ږزߴrvh`=A :siCd^bO1貌 ,{'_ '3L\cS^]C0$o!ME$> . (,ӹ)+)1[O9>.Ct[aQAkPM!?wɦ/W ~QB"58 QŨU$븍B,+.˳^7j;9~_AN{d ne )ȥ/Ih)v?y%AB%Kk\ڔy4݋sX?a0Ѹ#K f~s/I_hjH}tlXGR(6I?XL|4Ai/(IKD]NcU?ø:9|OO}y-@Ȉ쁮3L49oTIh(ĠFA9/Jߦ B͋"X8KB>HŻu8Za-Pw$>li~c,S'!P6X QKq "oʳ˲# 7 Jvcz2aKKP*C%zqI]ΥY#.Ƙ+;p7M hJ8Њ{~Y/Zf-a^%CdMQ{~$.uduioO=j!k,X-4ȱd`%^ D% W`oW~<[Em Z=F"pW>ܴ7z]18:A7xiD B @ٯML$ ej^`pN"|TLֱR3^ϐq|'ef,M@rtYLc|b4S2lN"4H_J!l`*?E7?e)IzcRZCyB mS5ob_ LPuSvz]T+v`lŇoҬ;K` pѢ?qɑ("Xs⃋6E"اz5$ 4keiQP)Κ PEd-QX IQ%bJziF\p\.i vp@OHyY6q9s92sH/ U2~\QXhF1{+G*V 9 #wgŽk 6HWrpdIJ=)+gd(" Լ9fϰuSvkzlrneJc["OF3#Ŀg liNoSsG>#3$ACJM'@s5_$"8 D @%mWzR9)6ˆT*bTvQ@r"1J"e0B0XXw%;X[rz3_I7n|%MI78@>r~nį7܈aA2m]樧טG^7-B/&eAxo[hz.?֗*KxZ9KQ2q4mQ<̜S0[(4D9&,TTKBp.!/lpHJq&-U~g!wt-|݉_wםD*b4F͋-}6Qd;Hb #?9Vh'4ա1PnLHP9)e/dn EU!ga$BK.uo!8S%wݺ&n!v#aW9Fp79~`h%"ic!1威fΈjyps6%ѧs 4+O  n$ GsZC)q^vpX,(ǚ8t2]vmwVVќα|NuV_ +E73Gxzy"pI{+([ݨt̓28Bwm"OѼNh=},:o{ƍyG:3AQ Is(=! zw$!Υ:e5FnreQ:zSԗ7NPܟU `\:y,rD1^z|4!QEڒ~FnySEG$3 Gz&bn<+n:>iᮛ\XQ>`pvm[!a3[S ӋXE&@ZGz˅ >X3Dk\~;\Hm zEѩkHc/07zK #(6y1 jːvgɷϟءr~}pc޻uZIv:I*aiX+b # 70DJjt2 & FUqxa._qs~0Ni]G5A206U RQz_"3N9 ܧKe^)/!aρ"C$+q/r@H|h1rN>eů]N``ߗ g HZֈ ^[8Byn $>A)Dz8O˒QZt7dLF+Q5םixF 7Im%7,A\lEDBQ<(zOOϛz7fsR9Q9^gR6~SlpآP6|OyyWfh}%UVh(mC-MkNpr܋T AD ]aDgARlnjvr+ĘIW`EBr)D, %iWUP^ܝ\"9㕨I(9pDgrI\}r&+Bĝ9: 6)*:M5mb|5\y٣7{kjXf[* JS]Fu<vIbrh+ɃFx"KK<K5n(ј[' N$"l n<>nO4G':fePҟm qBgR̮-:֧0b8)ȴ` ʜ<]m"_9nJXXRT]lS"L?,PedDTn^HYmcɻuWU!o踳.&`4gӶt 4doP\@r:n, ɔ:qO6.2_yX8@-ÂcayIqNuQ|^FU5%EdcfCfix e)I/5$xTun$0J[6|r!T^nlJr$"fpG)-t 5Yiq8d&##ns'&[K9,wS̥ae!gX¥aD9&8|H>,]g=|p:`rڕsBJFmoj2}'Rw?^bJ߿? /a^A@!Qخ hb#2*L,=Sh+V%XՒ?f[F@{Rv&$ʑ.6̪I襚EPhbA:Y-1K0#11@8`wЩen7y& NZؕѽ|M@!fxar(jUsn}wO϶|>t淣᥇Lk7s\P񐅌s^M_p|dF3"uVm i!-gÏө񝑛A),B^AۿA-o Ma ' G#)Uh5ׇXE*OYYM8#imt$¨;6Qq5ƢԲF+8oQRLж]#U{w}h֞TR_J*!y',AD/h)s&HpD0jZRDe," dAf0\3㴩󮙊^ nq2ֈ-.-=:DT@-tɗŚ]F)DfG#u8k균9_*ÃDQ$úXcW ʂUzT=MuvMv -nU9y ->Z # n%!5No@Bdx8p`G_[j+}gU'JMʒC[LNJNQA+ ֽ{^~KR(m6'9>>,xpr+Ph$a\f+O8r07ܮ;4UZQɉO>"V 8l^eoO:~spJ4|٫㗻|{zf'\)G߿=xuzpĶ+Awbu-,.f_Ys( C[ ,kbtÖ xIEPY:SsO4_4f5Oc=|2yJ0b^/66N鏏& A񎾄XV7i@* mb@f&%2ݗ/AuMg3OⵣT_dAmҎ!d 3;oԍ"m #iu8^HZ0?(a 2oDMMxYEgNp5C{p3$GOyGġj~쏾RH1~q167CL/ƧE`Dtp`DdqYWY!$~!s/ O -,,'RR1٘"֐Ejv MԷ<]~ 0zuړGkR'puӶOinݘT|~qSEsnekfyo~O_\?ÓÃo?7(\`lXvL0=\-VvnyrƎo9USFHH 7\}ݻȉc\}YYk=l浨sP4QeZܒ_vbMOOOEVi'Rt0ZtZVm'\1Ϙ4v܁Rtj#EzC Ϫ9qݡlP3L`4w'M=vU`:}v:n.tٻͅF=[~\4ssEp^o?#5|h*7(K;\Q\Nw~~^?| /\w!;TKqP^86o5-4}ܮ./'B;K0˃G&Gw5z4-DjYthf,AS~}],Dd>6:|^;zsa_Qg\#fܩwu*~5 $W_iH;R^7ٸ:~P\J3'Ow^/<a:zF?߯Ls}w_;_4s0y?_N4u]>[oF w_i8|%N[?_g_.|į60xu|z*8OY3eCL >{ށ_4fϏ5>E>_K7`S2 C.5؆_E%[l0ww,:`ER|+z{Seբ V:rjisw Gtw<%|!FF/7h!掔 nȭX4A]-#Cʫ !P6< VP QBܴ nÚ˜z{6 ыJ$^LV1pG_!02\(^8WIl3E؂1p!ItU[7b -LZRMy.4w32#qMaхB8{U8?3JYCKf-Ø=Riߵn2=pMRXy,0|>VH(@ @ A7_]tɵqtJ?K] ﺇu.۰ᴒ ;,$6?I1q1hhn#UaY"Q !&*:؜~I%%V\P<16he/ 3/gM2ZIL@DT@ad\Ƿlz`$MD kDha=אݲ\C"_V$ 'pj0XZ.ZX'$Wlſg_"|'N4"Cu`ϔ6RuZH"Ն8;ё793a+%qPn|D#>BNC_OFdޭ+n15~ ́KZJ! v^xh?NN?~Ǐѷ~)N!~c'fEaEOжzFx TLPɐOgYz|{k@;2hfIr6D/bdlx=ۀ8C{*(ÕvcJ!g6.>] 7k÷=ؙoVxG₼{ϙ?/)C}oI{V|~\6#c˴4IC^XmYӳƥ weݹN;OuU[q-mQG{lM5_LXV%>ޒ>o?.e1zҙW=_?G{]|ҹmo ~"UO$WV#钠m_xT!o3{myb1:Y+1Dgo+|w c?69:O.~'|"|%di3':[P4x[Y)m_Áؔ8?]3.Yj\á %['}:PXhG& ؇w/ |1o(PfD9JX"zqdxlTo.6/i~OrӦz= %x3p2z`562 '=6P~>4 :pl:z1ʼBYRoٲOri;ϰdِad).g܀ D< ,Bnf4O`+> y}HN,&7 ,Na7Rk^w}7v3WŢ+=oUT/wYAEb^Gy]^Q!΍Tq11I~Ff3g,?1yg3f?rNȡ=( G'ߤ lK^ؐ ,X^il(\4\?,%u :c7%RƦΎGdR;V0.}Ir IT~t3݄Owrڮ/|7Ɲ6k}>dk $엨!]c_~RUj:WJ-OT@5mbޖfI{6VA}AXǚ$gIL|cy†nկVn,'o%5ԋaSGz-S#qrde'vDn)%NT$6hXzgQ5/uvq=k"6,0rqSΆ]Hir=Ŗbڌ6R~ "H'.XO*7SeIBjy2PwI{ㄋ_#]7a!v⩩_\hTfH ,SqpE',50ZH I;9@_l?& extLN'!)T9|hkYi^zN予nGxYp;9`(OJ FxIӋN z̧R5̑u|,o|A_)Sx9nS3 ۃVouvLt'|mA\L b>Y/S6;EuvݓY7xCqs_ R3"$LV/*k Yy _TP9ujW:nX @>UV|͌wZ'eқr>QPRLjl&v "mg[9$Xjfms?ȖRbpI|ڮ&VK̨gl;P')z0 >dS(ޯqSZwA*X1OURUi.CH`(B$=ECp Jr?AH͸*Ǖ$YxQeN)a! eZR%Q΢ۏcHMWj.{&nL­ܵq#s]Ji'DBPnG@ } @QEέ+ѲIcR47FWp|G'M,3cf"WX/vB{@ꡒ ::9iӪm/$PWH>z"Ny~QVf!#U^;olRs3CHֳn0&Ybל%XR ؄ZJl G&4B:qliɺJdȑx 'qQߥe]4x|Qm[vVhCt ,N)KxA} {*Ra*jvuoXx&&np>N)TF'2f\gUJ>)CFcYqCA JN Pl:_rdn+ccS2+fѝʦ0X?&A/ P &hO ģ DV 5!ϟq¢=h!LYhqan_Nu ?d\}C"0"an6V3MT?Й}Kh{2=o{'<9pMZ  r)YqEP6@ tQ{pp?{;Ax?^AVr? l~HT6C"Wj1'JFʮ~{le+)ԛP7- z#_CäQzjYv%,[180ruYq& LF }gӕD{aÚ^B GjkhÊ.o6{Ԣq"X~vb 8SҰ1ixfx4A KћGT crY T'ZBW]g>U؎ހ75`cg$WŁa` _Cқ_^d\!` lT]L␐$.5GOؠ-CR(L<#IǠa=dtgN84u_H8\4gܖ<ɕNn %=mmar;OIS\Lg-'װL T͸DT(sM`';-KIS|X,N~Yj.q&*xb$NQ{%T"cї歉U(so+@Vz2 L F52'!# `ʀ{`$:R!(-HڎWq2]$n :r2iԉ=a`1 ͌ctBK =#H[GR,PT=dک}ngP q异™hx vU^jvm~n!16BrQXԡ-x,޼H/a9r˚!(~ S/&30U L.Xj2CXV,IxQib;;Fpj>e/C'& 7Wq7l|?CtYکp/r1Slez9_͘ !7S8+# Gv,ɔ,H>Z9e4ntڶ*9)0;YD.(C{8Tv`WIL\ͤAgml%2/Bi)Czs[qx^e1Y=X/!^j/Z#4r3,31(1CY]o5KR yIiVbăƍV!e.G/ocW/ 5˞|&\t s`ʧ6pt}QslQ2{_tv}by 酧}ƻez,l4i'}yp*֘"ZageI`UENoXN /xي]1wҴj5ճS9 "gi;x[ 3 >|;GwL[}o2ie1o\סz2t:<&@#o!f4mdvR%~F#ۉNcv CO =nKvуg*m]UBoF4^֊ *iFgN|jƲq -UN۬@f #D 1ג t"d˴HE셆V$'TqظȊmK[a&Ffnvs /(" ])8^M%S}v8J/߸)m>t|V0QYtJ?DDQ#PvG>{K27K\"4aQNǐ}i5Ȱ^J'Vh @_C`*vUA@DIA Uभ!Qmi*nr!oR6yļSr!P @Z(qrԖc`-O +X:vr؊a@ 'ZR\v3;WfM>]n0b%yR@n@%\MaGӝݹpzzo0}Qr.llFl63-e}xKSRP@Si@ yW jب>yVUclo<^z¯/Ecd4vX$ vBVf%,CwJ$i0,^ 뼢;g] HUՠdrF;'OsJux_FS%9vBIvڎlk@s.[f)ŸHIC7);\&V?w+'!4/Ӯ[5k EF26pf҇32]>,߉όظZ)R^[r&čpFDŽԴEٸ!4)# )3>nB38/ ]"+j}CORm`0߆3 _<\F1!dC y hC1pì9t3s,pWc SnáX*TVYhXOfw\`bZ |$_愵%KqE^3wbf2%A)"Vu h e3#}RKKibD)s;YrA~8x~:B`Rٔ_Lr?y7*:Ysw$YO>@QBprR],w`>V!@Lj E9쳟 be$ӑP$߳*rwEDo̊=(% Tr:IHflnzC!m&XŽιɷrq!` @ț3X w{̹Uow+/#\`;˛:fcBc?Oo|9?N<-5Bpm;ߕJFt.쐐s=w&n cbc|8+pָ7f70uPSFHCIC̙m4,&XGX<3 ̾P 7w) v*;. Qb/Υj'+'rn ҪҿJ7NlPlN+ks&C/^Gf~ ؐc8 bI!d4uFRv@O3dC¶^/ PS^J:|N#V2Yc$0C̑׭Z'YfW!8W/u[Yc(0SfNJJ OjOjXJ"#aU½͐M?m^BwTdsqt/J^CFN (H49RF=bI(crB>|.|;Ԉ0aD̺2d}"@Y6q]L_C3d8Îu 0@A߷Z -j{[oz_R:EM:/ ,YN1( qgrM/;IMWa+Z!Lvs8Rl֢"e5ja }adgYYK5ߛI[`e1%bԚhPXw4ZRyɔ*I}ݡ0v| `:*˶DU 0$VM6ja_-늬8YܱᴂS¸q`h{Jf{̃"o;Z!5^L_mm%1F0v;mQJ$"7ti3.mO'"zs .=7}Z# Z ؜*k;ݍ@ #x54qe!P~V:3?Q N0+ra{q)Ɠv $  ?skbnPUl)nL0Ji5VPoM:U-:V-@mdj- 2mԫW'up1#n!pN*^C/uuD6P5? o\}2mw2iGB;QHeiLxtŒq#qmss;1T^A[had!7PInqPS]]5\7$`5]pc[4eRnY7lJ椦q]+';2(`ssT9j"^njN5!9,.LJ凁F b),e} fᣆCvyS qQhk*lR,.3!46ٴ q t¢R@G/40`ݾM.nu&9S wBtv]?0OtR!VA%aW Lu?U¯A yxyL=+Qf6S[<'*QC;,`joXD1b.aoW\3[UjŠPu6ugz$-ȡPZd9*`pqZIfqցVn4?>~-o7׹r5Zðtպ4CbW=,we?(;t2RZ{"R%mFW[w! Ϋf-H_;4Zp.fD#ӎ5˲L*2ܽ-xGE'T*#tnh0UF `KMCجPpz)6g|򵒶ph#3-Rz0a cn_eQjfn.Yn F 2Ljq/b'#j&fe`\b?gGh|&KZE56̈;R:fV#qu6[a0c X"ޕ^M W[ɉTor+j׹a|r <ɋo8s傖t 8Q`7EebզCȲUQ.SVOA'-LFa.ڏ|嵿\"Di#mWNWyq)c+8ˏ6ܘz 40i%4ЗUDUcSn# \/)Q8 m* mL] ܗО^c4/MFw'Gh{5S_>մiH -%%n531T(^Ko5''ٜԖCnw[e.rmN2k V,,0u ͽr$mbI R&ߪ'+`='Ói`lP5i1n~=6^ZSQ?CJw]_l@#~3A7iHg܃+-O-q=;!@.916N)= f̚YY0 94B0{T5Z9)2Lj@` Ui| JQ;YO-;D#:GMpyWn3m))lBY/{ϯG/#TO0YU\qru~K :a(e}u:KYa{t0SvWM4@c0CJ5-ݘհQ4r na=e88ky#8rbpЏov3y;i&Ǒc%7M܊+F k2ڈȘۼt `B͈9 Ɛ+Z! Fr*ԥ J(qjC`tFX+ʔu50'tVg6!a9ه<9oDy;Ϩ ,(Ø]Qahwc09AlVՎ=vatKViWrM:"sD%M[. ݒ\Th2.+T, "ոΡ'(V*Ö'tnv;i&F8mC=iN3Kݺ:t8Rxg Αٲig>(hZtjwѓaCT>'~;ZǐS^9Y'ª)U(i n#@3Ub~{?cww▯u%wBM\zz[sn D%IVUO$WbˀRH@/Բ|.Ag}\TBHT}ͫt,jkZ8]嵄8N̕ kz6GnO$!s@QQ[[8!r:`ꝑTdAEԈ2j 7k/a:k//g"qc92úüϑef%q@8PKLYo·]:<a{z䛳qx-B+]]H{E1иDpǑmM҆"&hE⯛lYh{*#Qv,,w:Ko z=#SzŢ?v((PQnu NDvjy΂\z*CԟG Ɓ-207m`p^c͌-(ɣZEA_ t{AMQTߢG≐KqIdofrS]ch\oy Ni!鴖>q AqdVPÖL=3sP6B5J^&QefmtШk*K_pT^5U+_?HBV QHoIk#r6s;Ik@ ?T6D pDr&J.b &VT9U=v*5# b,P2^N[;V>6j&:N,&^5wjst\]Pb(MUVd|$~_:}󏊰28dW;7cyޘAw@P/fH.' yrn"* Y*ʺsv" )p/USnO6Z&@0`u$I'&:iڀTzҙ텉RcBȐ׏>L4$}.t60 6$:d\`0ƕǾl\ 9r ߹ T%Idp+7mhjnܐZukD`[ ʏwk4 Xrf8@w(r&;P ' Oc*aQ16u<.&OW6>α^ r W+J.+EB` ;(n!@l`֊Fϵl}P+~qgmAw!r*Nz)i$`JޢW)O5XC>@j@mv I#QPv\F.5gh2M9+PǪ~ 4oT<'l@JN=lU37:3BzJHx[u/&$]kt${6WH9h V\9QcҫQ@N_ 0yTɖ?od틊q(w竺\f%S%h4˜]ɶcdҗnۚ{<H.+(y YA%x*JZ=.Z);O[xԣ"DԂd/=ua3ۜh搾l@2 DRÆ\ns^M,+P }d~qϥPmu-ǁ1 IDܠp؛i##ޱk>3O 9A.JZ!AvD8[J1وnC;fp~ݳ$q* AGP\Y<-T%66u+x '::q+j!-(Va7P$٨CDa4'j=&/RckwжDlpa~=/@~)~X5f+;veƣP,Z5ij) fɁ@s"0T(@kzmq3 -ݎh-ug+dSgzCk 4; _Z~6M_Oq1ԫb㺲Se]+pQqsd[iAcCFFOD'a:r {ڐ,~;/y;l^}%6(sڗg9+dݵ7MdCHtҎVFjQR#%1=aE y획֋&%4C/XF'BN; Td)8Ėv4ơj}SaG֚lUIl-]MنWyV4ݠ05L? bci FG8C<ؑH@bR3l)m_<F?x+z'E&=prT\LզayT_U5aJvl7«Z{':[GnPI2/$9L-1o6X"O}e_?4u|4Kf\3lδJ9Wn?%SX =eaOvf ^F7d ,4ySU@X;NSP15OZW|u뵳ԚG~5Y|]W3lah$SC}{j']}RmX7B>홿R&{TYnY)~$ >g'>{[v F^$,Qwɜͩ =z6*U@',BZϨﰇk6Hbhۤ҂yxZ*2-H=.L-u}i(.ؾ-)Bמ9:ݕx'a ![Ts!9sIJwEnIndX:fNBP [JaCLj8l5.B[)=2fG~} syANfvp͌uŏ<*% YـEpQtQ^XtTD5{6:wZ ^r6J;~N-#0Dڡfȿ!|j6z߼k<f ǚomRZuZo _xdG+%R-t}1I&rz F`8>ew*nG5cor3<@QnPĹ\8,)AwT{)^ER(uﲕ3>5C`%Hbj0Cv&Ɗ(g? (;[VCfw<%NDk7H%+jhe\ΟͱFZ5QZ(X6jɶOP⩩\2WgZ|@^ӽ25Bꖎg27=(!Bh8F.ݴRq_۱AMV nM\j AlؐmZz[nFsT#XIrD^!q % eu 琝zq7T5ujY>Ho,Ѝ9mY2W⬇NUDL$ hr1yf{[7,aQj#Iοc>(ȄS [pd\_&z\bve϶1s#c"ך{ 0iUOF emcيo8,vi6gW+E@xmqG5qek{Ĺ5? )Ac^] VJKז;NVlYe؃!*I\#&8실P7 K>$ϩ֒a:~*391zUS"g cX̌5>vutp!\?k^}F`h݌^qxFd(Q5ns _L5H#t)qi։n.BjV[ݮgQvh.|Zz@_HBjMz`&rP*vȒz P:4To7-B -2Xd9OF孌L5X㰵̞~QbJw:DL3xYo52ཀྵYș6D_6qpQ>9+ՒMbs<Ҽ?&`r!|ׇ ][$gW{[x(rۗ_?|WoAU(s_ ;YwɈgз]Z>֮%l^oJח+t'%r.U_[2pwc tes*3C%`*UiM^y4z23:ͷ+gqF#TnU kJ9XAte-9WslqֽX\Z jeWK(3Z-V$`FGq&ډ陃g9x09v7o}7ߚ9x'~ÓoV4NHbH >7@$~a%|7' m n,N?oF3a`}p;xEFu_ a8z$_kЖ,r -Y  k:!md/u8rlR:#_zi)bՂ=d6ns>>Df:<VxҺuQ&7!f}JN}M}گiMLe6N%˜Ĝ![FjdY.tmS6(#yoi+b9Tsځ5xX j:ST7! QX,כsfop\WC[EC@[\^| L*%Bw8<:!5=Jc3~%/ƪoR*]`I15O)KZms+UeB&`G|bo^%!kƦGbUyX?&=xX?Pv=ĤhJ%lId"{s62=⵾ܪKGI 1ŤJڳmWov-9V򚔽 ZMX(;:  jbҌCCxKϞm$dh Zk2KEMfҎ;=ԡ|Sϖ4݁i#k4p6NGԄPZHBSGFM!`zнUf= k6hb~HJ*)ԽwU)6Ύј9fW(-tDWIkz&VۆeN0F q p $Sμɂݰjz!N"zB\N ClJ))\]Nx#\Y\dQa9<|kle$A#%$2rJ2S3I(>wws/Tch7=D#;m4΢P:W_R2)?NۍٗEZzdjiv_ PT鱽Nb}Wf(g/uS$cEc~Fޕ )t:4sG;t6 G"FTjSkeO][+]o*h3fdK7P#@lJӌ'9-dTH-Kg'r*ZS, i jӝ!Xh ơ)%FRVF[W #"6Xx$WY%Y:h},lLH> Qm;cًOG'/^x.w=B_;9 }JWOp!o|!H -ȯ(._i9Z=1dElM;Ch%9A($ 3d2 j@@,!u?ixU@8.V=!/UF6N>&tW%K˜:[vRK*WTʇ{_a/5 bW,}UXrlچ퍴zIX/gM=`qw>[k/V*,Ы{'Y%oC=o@0w׬hA!Qai9 e07}݌20[HY(xj~JȾFuvFzɯB3A gD,\ ٥1Oz+v?kޭZʟjGe=i-.P' ljk᫳t9R>BStnU;,IΊ fl]ι+[9\x$עÇ^i͝3Sg.ʙM ZRNt#D<&vܾ:\old:ik"|