sssd-dbus-1.15.2-5.fc25$>1Y׉f=\Z43Q6>@?d   : ! 0Dago D  X  l        B t 88 8( 8 9D:E>a?i@qG| Hۤ I XY\ ]( ^ bd޺e޿flt u v4wh x y0x|Csssd-dbus1.15.25.fc25The D-Bus responder of the SSSDProvides the D-Bus responder of the SSSD, called the InfoPipe, that allows the information from the SSSD to be transmitted over the system bus.Y.buildvm-armv7-11.arm.fedoraproject.orgFedora ProjectFedora ProjectGPLv3+Fedora ProjectApplications/Systemhttps://pagure.io/SSSD/sssd/linuxarmv7hl if [ $1 -eq 1 ] ; then # Initial installation systemctl --no-reload preset sssd-ifp.service >/dev/null 2>&1 || : fi if [ $1 -eq 0 ] ; then # Package removal, not upgrade systemctl --no-reload disable --now sssd-ifp.service > /dev/null 2>&1 || : fi if [ $1 -ge 1 ] ; then # Package upgrade, not uninstall systemctl try-restart sssd-ifp.service >/dev/null 2>&1 || : fiQK3 큤A큤Y.Y.Y.Y.Y.XqY.Y.Y.Y.4601b3592d313effe1a70c44167775b06693dc9b72e7bebc718b6c9e8b094b8fc0c5275ab2d9448f19885ecc6dd6f7d3652ded2a89a16bacd8d9645efbe8cff72a77301e3c280d38c325a68a0b9e49fa85eb86f3ecbcd073d41dd53cd9b33494ff7df7df7aa3e6ee8d8341c0516b09a22a60410d4266f1547242fbf604068f028ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903eb242cd297810b9ef608c596342885a7f34941dc467067b16004499055207ce4fb8e8a795ef0020ce28199c2d4c09c611ec680a1d9c78dbf92e0bd07001b9404a615a3ae6ff6648b9675d14cba2e92255e51c3eceb3ab154ca7f3a3abdde9f2a32c378b1ef7cfbeb9fd19b6624eef9cb5d795f79d5893fefe837e6f0d72b633erootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsssd-1.15.2-5.fc25.src.rpmsssd-dbussssd-dbus(armv7hl-32) @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @/bin/sh/bin/sh/bin/shld-linux-armhf.so.3ld-linux-armhf.so.3(GLIBC_2.4)libbasicobjects.so.0libc.so.6libc.so.6(GLIBC_2.4)libcollection.so.4libdbus-1.so.3libdbus-1.so.3(LIBDBUS_1_3)libdhash.so.1libdhash.so.1(DHASH_0.4.3)libdl.so.2libgcc_s.so.1libgcc_s.so.1(GCC_3.5)libglib-2.0.so.0libini_config.so.5liblber-2.4.so.2libldap-2.4.so.2libldb.so.1libldb.so.1(LDB_0.9.10)libnspr4.solibnss3.solibnssutil3.solibpcre.so.1libplc4.solibplds4.solibpopt.so.0libpopt.so.0(LIBPOPT_0)libpthread.so.0libpthread.so.0(GLIBC_2.4)libref_array.so.1librt.so.1libselinux.so.1libsmime3.solibssl3.solibsss_cert.solibsss_child.solibsss_crypt.solibsss_debug.solibsss_util.solibsystemd.so.0libsystemd.so.0(LIBSYSTEMD_209)libtalloc.so.2libtalloc.so.2(TALLOC_2.0.2)libtdb.so.1libtdb.so.1(TDB_1.2.1)libtevent.so.0libtevent.so.0(TEVENT_0.9.9)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)sssd-common3.0.4-14.6.0-14.0-15.2-11.15.2-5.fc254.13.0.1Y.@Y@X-X~@XO@X6@XOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 1.15.2-5Lukas Slebodnik - 1.15.2-3Lukas Slebodnik - 1.15.2-2Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Lukas Slebodnik - 1.15.0-1Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves upstream#3382 - SSSD should use memberOf, not originalMemberOf to evaluate group membership for HBAC rules- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Backport few upstrem fixes from master - Resolves: upstream#3297 Fix issue with IPA + SELinux in containers - Resolves: upstream#3360 Do not leak selinux context on clients destruction- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code)/bin/sh/bin/sh/bin/sh cadeuk1.15.2-5.fc251.15.2-5.fc25 org.freedesktop.sssd.infopipe.confsssd-ifp.servicesssd_ifporg.freedesktop.sssd.infopipe.servicesssd-dbusCOPYINGsssd-ifp.5.gzsssd-ifp.5.gzsssd-ifp.5.gzsssd-ifp.5.gz/etc/dbus-1/system.d//usr/lib/systemd/system//usr/libexec/sssd//usr/share/dbus-1/system-services//usr/share/doc//usr/share/doc/sssd-dbus//usr/share/man/ca/man5//usr/share/man/de/man5//usr/share/man/man5//usr/share/man/uk/man5/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -march=armv7-a -mfpu=vfpv3-d16 -mfloat-abi=harddrpmxz2armv7hl-redhat-linux-gnueabiXML 1.0 document, ASCII textASCII textELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-armhf.so.3, for GNU/Linux 3.2.0, BuildID[sha1]=f78b415c5af8bc91c1c89ce872faf69afa608b24, strippeddirectorytroff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)0RR/R+RRRR RRR1R R-R)R!RRR RRRR RRRR"R.RR&R%R'R(R0R$R#RRRRRRR R R,R*RRRR5utf-8?7zXZ !#,]"k%j{}{&-򝍧N8 qD0UPnW_34D[]1L&ŏeΤv;.| ex* Yb(IcSz ^bt1h(".7-΁u|Wv{Ũ-}'ރɤ2W|4rT ڄD%fOM&IOS0[c%[dCo)3ziSF#ك ɰ Bm6l»Kp.LǟW-/9IX'j FɠT`DCys4Z0ªB3xzc>IN^8'UZΚmIV>&qDf%\a[ā-^3QiU|HbAU̘C4K>E4ry iH# n&E⡳Ժ}~#W! 9&3a 1ȃ0llAG$ G?4ys\8OOt#J:Q6PM^a1 ,w2ˀ !QGȋjrllACjn.Koi%Ր;V FN jI $g{޶;ykP~XvIl3| sI}u:NiS36n'7lK{0E yt'NGQ3Ě:0tիWx?j0Ă^]o\6+r &f9- OjJ5Ov=h. 4o:j^|L0*:x.v=B9C,`55'1|lCٹK{\2}9Yrah!Uŋa% ?@\;qnjt:gbB˿6ŔĦ^Bòl}1\)aU%Ez=2vTN7FzơP' ?|e(e6#[g$JƩЬ"XD( `M1\#Gy 8eѹEZU88ܱכc.jOpeWUTw9j .gT6L,h(B9Q|ݼYh=,&4w7Q2u^\2G LE|jleTvq " ) X{]~?#d Ux\ iJwFXer֏&hsє(#g;}~dh~'i,znk ϲHacCdBJtYQR.{8X6L_~=# 3>s{-f%:33+ @I#=? Kʖg Gm~14+$g?TRIN l}{^%6 IA(Ů'Noq@BX|c#NA/] $4Q=OoS)cG<; @M RCV蝏*29`?6<9@XoK\Eꇩp -))r8H$…H,Gu䪞Ajg5<,_OEwi.@ 2ubbfLpB A}[+ B6J\)ϓd/"nvG_98Ǹ&n3<z B% l_%:o`ؠL'atC!=Eڏ3]dbjT: {2Mj](g9Kw<.eܠ PTAEcJsYt1+W noln_늤M)&Q$|kivsr&46Ve 1a@>ى LqwƑG qB?qȌP/o7E43PST }%,!KKSXAV='E"Dl29R1Et5Bvd44ȩ]Ђ[O),]qe/es]'PIbUj ^H8k t6=bz_+Ԙ͟116qƕE]j J+W?>@0bxc&uPk$p4XP~ hLÈ8nd-fnEvZtQce13Ø\ 6%!+< ? vYnnU+Afˌ1툏~gWU  z`t?o;#h©?aJwm1oXxЁw*qmjYN=DnJMap[h m I#_Kؼ誾w>W<^ZdsξjxBPMv#좹Jl)xF<.輆] b RyT _KhlFy.Ȕ%&+i[mMC6ŠH {74>ƍj10#htoxw榡g|ViNĒ]zf2|s Ӌ[3\V8͋JS˻͔GM 'p&%&Pgwo`%C*=<5UHTs&ힰaGC2'b:*Vy3bYWRJ,0҉||-% :Z/iy.8AVߟ?7s=VQnj' ƀj"+J,):%ȬJ}Iq١li.vz@O^9-+h&xo"`5%YAlȥ><9*cǀfQDx,5d M$8v74fQZ>Mn"ô*3)Cw$goP;+;'ޞɭh[9TIScBe+=Sq=s7-\PKͺgL 'דk ܞg ޘc؊F%7H:Cvys'e˳.1Y q^\]2Hi7Qyo{4ɬ 7$6lųZD U-[iE5ոx|$7 _=ddW 0uv=fz1L9i1D$DLxi#wty #YK\}5}nץi*3L M/B X tVィMe٩(A}cMaɯӋ: <~sk{LnV|!*}W(m Do`qoP^_j)ENoq}:=c/^yC;b\;vf18n䢗_._3f:dGi棁Z.^y Ig}m/OA?u).BOvx%G_q7m2  5tSlF8u8:_|*c;c"21՚t;z)Jn $A!êѫs0q=8  }6g!%dܷzH;S~ʹ% ~t X@4&Cxdca+a*Y ~<B&rU5޽r>Gk; wfB1 V# #;5b}߭[< n ႥYHϋiJӮ񗵰&?>|4qB?ŽZL-2ğ5#JSxP<5|-9D2=XVRIu]l?cWe6@lr8,.]_8tQk5ֶ(Z%H@؈r7ޥRP {vVEgE9/[ufj.9,2ĜgAk򃦆>!봙&=[^el(£e>p }yT<bϕ*J$pAT "au~r SdIf.@Yʚ*ߋ6&/0}EE! ;LNfu3wvxz>;Q":j5_ WI.f%){?W_Fu@ΫuYlw=A|qbE/=2y{|ΥҮUO.}"* \_/2'gAѮU!,yȐH1X#%Pd`1FYjv@OUy0<1ZLek͇rORPnyb|e=X˾V+AmnV?ݠ ̸$JMGU)X ucJAIzE>699A m;+-\E=EČ 2;UaR'Ƿ};w]EķbQLN[a/l /?n vv#4{.7lLɟ/OzU^F}juApX|dzo0Jj[*Xf *Q>.Gc*鬄J>Ww ݆ `d{QCqh ( 'Xp`cADX {|k;Zw٬ϲo=zKfa m SepȒ&!/[|'/7Vz&<޿R@)*I4֢sʮ3)~i;B, I{zw 2VՄ-(2|y m2 F kr|7?־vY"gS r>@.r8+^Y]ƙKB\}/1&E6Na]nOK!Y_GuyEPj]JcxOA.t Bݍ/ƒ/U(ezt-(\Lj :az7ûmv&_oN*uvA AEU_[Ur$>!b/9y[(1+M8;(%sz_YV 4"?ʳ~)|KEwת܍ "wYa¼B)aE-A<_)z&*wu&8kȭ J,;tŠ;o yޘRo;xa-4վf_hr/(U$s_MբϮ27uMw}-iBt^N@WjpN^nϪc$UD~̜ [#G9pͣ.巘!B gٿ,>~OFS+(7YXB“rVsrZ*WoESLzF'7Jz.ϻn4{JLj 'xؓ!Ț=4'W-- |R%w%-Y Hr.ޘ1OidžȦG3U_!Z ǫU[0]UYggP=Ԋ ׏ـऺq,0`8~:?ȀyHHC j ~TiV 6VA)IK=NosNz}Ԅ\bly{ p fSÀgI>?ofR汝%l2 191%i ] XHKVI@R$gzc7xI&VGt8? ]FfBo H$@81#.@8 ɈiC+oH'~`?{RL+TX0@enkA lXDWJDc #jTA͚[h@Ә|10g?8$/,luG ؜??0bdIu7fuBY] 7hJI.׉۷hx;T0EF32G|k?ȭhrdN:*%JTLI tGG6%vvw,2VX"/a7j@ū}AcVYY"aiEOڙ&ܝt@ǏQ޾xNNJq o$}$=7.piVQ e?2ws;TLKWʈ=lFM #Z˼#jMHab7=q@W}:- *e?pg?M,Fj0JNjxcwVZڸɬhLАkL2Y-u6rY3~EoAPQJ2gVX}kˣw -r>\>pb(#Ts^QxÉͲxa3 s_f]!;7_O:َje/<+ ?&ߚ߭L岋jR*?R0?TvR(MqdCxkv=,^rY-,+uK-!Q'ݙ v^0S?f\jyAJuk+Lq;CʯՆ`$Js#~~94֕,").2yf|_FJ Oe~7Z|cm͙-p~+*oۯTB )=ZiV ` kfzj_+u??yN[[_W٠t:|zs=|Gt޵Bg/cF$)4YIndQl9 )y@R'7EDmF2Q4\E>sTeVix1 8oUnֻ;m?.}Vi<.Af0-ϒgZ _YT>=^4rFX'@8zsw~f~!XraO&K;je@'$Ue8sS7_838cjeSi$28}?]v!pSC3@5!  1y3qĠ~pft?HQH~d h;!_5I> "fb9>~6i̳*24Z064W (': {AsIXLAd4in6KuՈy'xigB@Y7xWr5lz2}X.10i &VsCT)/X'uKZXBS(^> AKG9 ş̌Bg O^zX̝9بn?1D? D~RnP>/On"(?<ۢ[ cdd-p9-j;1;K& i:>vL#!^7(öih=y;+fpL&n@Qk \b U97 ^=̍;PuF6%r%. j Pp@ב9&cxdv>F]ĢU\ո /,8tV/'.q w-2IGpsY8wětIb0d2R;}"F{0b/"znt &U-sNcMh=(z!0kHnf VlqGߴ+Ͻ-|9x/m ĵwHтm"Gu*KԮPS'YbTXʈ+^I{@37{KQsGdFWm Oڎt̮Ft5Mkl`r|Z*2  R\h| gqc/\A\(A"hR+m QV[ZXq:!ȿLܪDi#Zez;/x0oOnOMj #AT{=\}^!YkhmMRن2J w8MM&"h9RO OOHö́'q0pKҵrVTu(ȼlBEgђȱ-[}-DHfg1$%j~g|I[ n}*nNO|ʘ zˡݐk^EHe*w#. AP B:xSE08!)H4vm`nYw=$ASlt:C|}߹=<@rw^PaO-s q~RAG W[;Hh);53fLe%lpzAMf.f&T%Sog͛a9 wzyFB{)֤^kp䊈w_EQmM$izUr;4+Nt-#ܿsZBw[cͱ#4ŕOv8TId;k^!qF% |M(72Wְq,hsJ |o.IR3٬-Ǻ06rcܽp&v {;' '(A`ajGpz >&k0oՂna н^[d\-&.E!0}c?8wA j"c6ځ_qp!#,^1hRo=Y4';1%+a>!lR]MgM" fCoՕe?hOR4Fy5fSsޅ bg$KƧYh$Ajd}A.s.<ͳ;!yPP T-r&eŴrlņ+Pklgru}Sc \SW~LRK#cE4K{`YeD m| e5(ċr^0upBN qzU\\U3Mkv[[{^](I6J̌\ ^IA8RLeD-W$dRzc*g & qD95Z AyuW 0NQ!hz"@1v7܈&wXv4 2ȥl) 9AYKq6"&*ω6A^㲭ך!R(_1Z_=+5P̅mk_z+akUb?K>1$Vv c\ɀln6#IpHZY{?냣krMA3R èC `Jts^* 9S !"#OȘàF6p9[Ϗ>UzabG!G7`hekgNi 8|*{_ :R7B3 I2_1 }z'$ܯ9xtByPZ:0bێ_W5bxLiÈO++}wGeO&:X*hJܢ+b 21MAA7UeMo,U@zI0g%T`K6g:&B:y_Z!ߢ2DPdq0W6n6idX~+Z*xgP Cɗ;DRP#q"oG BK3Ej ICtDd jpNp3)5zB.JVpk:t(֝ nL'6"/xQI"iTr>NPiU Fo D u gG%ܖsen怩# (U(rqױE>/? 4=wMLN_gqmH{`׻A'@ߥf4 'INU#]᢫=-5ylxOy@fj`9!Eo] /_.jXܽ(IN/ 31[ARfąh6Ze-1w2o^rx &C}K7?QHJAy9@ny;^pRBܻdsݱjP2>͵pZ1B[1GjE-r!zCjqfevY8t Y3;=тNvXfgMw\j>r&ϑ4p!Z,ǗuNF wY?&8 Z@8i op3=f<%F_~_R ~w",$~pwSOS4DmY0" 9?͌5Ψق[.gc55GG9[T'X-.ĚNKqxC4Sxr~sF,,rz nHKMqZ!bVZW "W'4"Q/ Ѡm) Ƕ1u%]95+nc"^\6yY}r`06# sUeVA*(5)El l_$#oQa[2&7 /,sٗKcA?w{yeɐNbJf4#wӉІ\DU4; a@Af+eɄ^Hc|^~mDeºQa%G4t]\6=aqTȻ 5MPjz$M;Cj =4⵫m._<ûNWU˹1ݹ-' YvODш]%)s^bԇzDGlt;a1:^t)RǾr*HQ#r&2`#ro3gfO@ݒڊBy}샀 =غ++^G=frEC3-3\OV.^p-;"#Vw':Rاe7*!`)|M8k;G(m86ڤڧ8Pٳٗgr#a5 @rEdbIy_T'K0]s@Twz!M; I- XCoۓ26QtMC,4|ԬŜs{Bit Xx6yF5V֠su#g8WFDc9O8|e:؀{QjL21#wTL q4v'όJ-}L_"pos˳H:J8rT> |?2P_Tڌo cAj|3 Ld`ױ|zSd r¿oCG>5me];zr\ݮ>6-Cq}g@3!i;w3^k)JANX]A`&G)[Rzl`clyl_19o-ZBWcɜr(U?$:+j[C |\S5ė !56ە}U9Ey5E1zK(g{aIm/-vPaWi JRc2KigV|3)Ex|\j; Yiq M!p_P)B;jD8>ݼ`H*οTg$r6.2TgKv'AN eܩ.)߃s6~B |s)Т< i"8 ?h Fc4y b0UC0Jpu"BvTHH&՚~ f ǀaL΃U[k&[.m Jl8X`h92MV)UMsS  ^9O/sAŸ e%áwK9К& ZfFW̺Mxx i j~NTga}3M\[oeOx}sFgLAh,վQ ڟ-~t-0 : 6V [<؁#N~x'ÊRGӐa\UC=S0oe{ۂ۬˖9v@w }90!errC~M5_>]er>NM/Kݙ|pA~ ; w?# fm" ؾμlBMb`v-ȴv{@RO71hIDNX?2=6&gU^Z\kZ)ѓ݀؏-I`Z㎘RpnIäϲ F#LcTlx Cd|k /+#\6OVk|Ma ,qXMoKXtC , q[ӓ $?된/wqj-ŴM#kcWe Eu E9P :17*<@*^´\&^ȫJH-2Y~e9YF ŚU2 (I>˅77Ȏ+e ;m?ԾܦbQCqWzRXS+%/acEpFOi5 ?&u-vNa0HgUco1`Nr;ıREkv(>SR׽,2 !M܏Y&Hd6̶̿CXC~tD_GuE-Ph^|/L$CMǫY0 VrDg>׽1-MZ],=ܟ:鑋+ {)jߋ250y,'|hO{.Q[{Z' GƏ@eMFZ YZN:1[0w//Gӌ>"],F웳-AQpZnH?pYލKI])LnUiDv8s>9^`b.8^#^*'e>j.?B"YZ"Q f,?g/:ЋX!NCZm0[?GoW-cԍgKc>=cuG.15u2.,D"Ny:Le u, M(#-/ovAnd4DJWJx$[lB#pU/0z51tLLpT.V - :Efl&!~$>+\:5acCz^xjnՅ0y8[iQqú;Sp U ^1#&Ս@Xtk20 f1!QrgX$:C,~9ȁ" wYT\G(,uc,Z`Q\`4,_NK$cc+)gچOLD{.40Xm*Zyқ:JPG[;_֚TU x^'C3f#oc$9TR 8hҽpɮ7 _ -Qݢ6I8c^ I:sMFLQ6_!8ֳ 5AIoR*;F~uh=u]!򞚷$F32To@A[ `g^2-:LVPH7$=R"Ȏ4T"T$9WMY<6^dŷօA2zWηاr+T8Y;vVSk7G^JL5dxPBS#T&Xq`IH|Lr? H*,՝Qgf,yJFGS-{lAP8[D*BA#]Y/CE-&= ?6&]ƼRq>Z8r i-Hl>xʙH Bxt`,D= jHU@?п~h}gvƮݒ%B`;˴NRhr%=d{Fznc i4G1u":rD=5d\,wLvB^,ݴҒ8}k9 D1M0r Fcᶠ A-+'W?/?~.;]mGr |Xⶹ o @b 䓏;rjN,37 gglB|."\ 9SecMa;B/ڂ Z_QPBKZH0IgzrNQp3TzB Κak \6jQg6=!ވ:6Zo:wߎLQW& R#e~؏ԆE鐨zyo# {>iȪ͓Bbxzl?$q 2p$]}xz)}'~bi~qNKNf mτTsG’a+HjL宾b  sVG'wO K<!7 $8^B#b<0| +~t^UTMsŰT* 5Sk e2Z;F. Gi q[3 ޢ2FյY-82-_iӀ&a:5lJ:bk>{:]a6:і]Sꂭ#_0]4\#7gmis|% +$Q`wl|.@׵jm4{ Df >ZYsuWHd[gLU,?"^JG}e<˯F)c]hg6)1f<ѳ")HWE8e*MsԪ`n\^ evy),"P=L/bZ||BfV0;tڨOAFIE:2;+O&WMJ>A{?Q3Xgy[=b-υgI)7lSF8zm[DkJ;R7k֓}IUbd5M6PF,͋Csxgh~݉ڵ FϲBy[m$K4\;$TY+*!*XqSaR32|[\<%.>[ }܇ޚ& OQ݂kIh5- DeJ#~yUK0Ћ1  ?n <W!Zձ}5<r`%7v=5 ϻ^%~hO\t6~E^XQQ"auj%WiCSNt@qp(jAWA]bhZp߫&Y"QխU밗;4ǦޠdF]H;" D6 !}`D\`Ysj^tkZj|ZLSܿ.WEY: "4 v1G&qAgR:Tn7 mZ.Voğ*sqb||l^m1Ų"|6<ړa"#`DD6?zo 5!65-Ў} U Os[,Oq2f(l)TJ%FoTK^\$ĖS; ֠G{?K#X:BbNJయ;f(1ݥj0pX3@#RzO5Zv,&I`yf F#`j kLڙԜ^P3^3Yia\NO S{͓ootR\D^Oxw p2`fzQi(*0E?j.0Sd\ [K/ʷF!HFrASIU7鋔%U~pʼ8eA; #R[3WMas&{-#k^k[r>lSjp>?XlWĸ{|_*r'}B@cv2wcجRVOPr\arr1ʼsH<{W02W[2Qs ׼wU4`PJHĢ uSG,{[-<aCO|!tND0!2J[sMьjC܅22)gƞש)&p33+"b\GS@\o& 0 MAr'u!tz}o#x[7LX1I(*]z]#G?ɼP\~O~K03gbPianI7L&tF73'T(n8\ _刵ΪnR'; +O:T1͊n.|n\WrCD9-1̩.ex/FOEoZ1 M"d#kقmn-dʧƞn( l2Ug5$) W0=nvVtI%JiKvjs‰nP](jW=~8~_Q \-w8\[yzˆ-$B~UwSTU ɟ">)ѯTNbaқibrSDFM6``7*'h] [)O3Ciո݁h~-aæ~xĔ6E^?#URɤ9* 5J "iƫ POHxyb~!H}{V˹B/5,MzmAP M:LXoM2[Z'9g4fr7é#=] JektKnf[PIh3ٵe5>ʈÐ8}:9P̓JUghn.}/+G,ጸ=8jMU/!Y03Uzw7vاtZ 7%;L m ;@ dgMzov`ZCtT}Pm=?#<# "S72\TqZ'lS/z~az܋ %SKo*~ * \֕]Vt[s-Vj{44v#IE;6S,2BYlt1/V4\td '_4é/r1܊VT̷fBS_Em92%h  p #r}w*,zcv4Fd ^Cg"ja3蓘a`ą6.b ĚWߨ[-d3e7}ԡ!8+D˪saZ;/4f1[`i05fX" k*Q2SGjF`z1MQ{Ea>=}֥L*@ǰ>,k] Z?'Bġw|T֟ԋw&IA8F%/TelP~[Gv`*UEaY‗DŲR+܂Ÿ]_GR< Incv {&g9;">8RHA"NT5@8@=WLd-pub5˵[a;*WbMdGٮܵ i*>NI 3P;~cl>X`ޛ{EAI"ɋא.msYCJgg>`qZ_!}%̆D*%9 t\%xfK#L8jwcϓʼ]T]DWnɖMUm Ǻ4֕$zP]P1mIs S\МY8۪NYi/Fa@" [t/KH+э LvaR`sd~"_0t|hԚsbt8BSAr0bc9>xeF%oDJ<4tvh_l3ǫޡ=apR7 ā O_P ' ,c_NOSo2n;g*]3ҙ39bb\9g3^+B8BSUȟU<ۖDImY?\z\w׌u\k?jfr9GrxA8SժjĖ LmP0BJd⟟ҍAl7:ZibC:Na:h>q'^Oάi?|8H".D>* E`\ M{ͬNr*Goձ#'vOe&zpa헹W.mjjN-ev>㍟^80? ^T/G^:Ws,$KvahӝEQhHylȒu@g l\ "!36@j + /k3Lm'įrg=9'"iݙH &T_Wk ;e,Z͓ArS{j8CCLˮp gi8&y|)ךNgY]ԳqHKz:~o>"sdnqŢ40pp+/4p\VPl"냭vsZ0ŴZj_m Wvf1ԑx28/YM"5iY ޳eb >-hH% w]ƺAvv w.`͉[sޣK[] xW7$pޗd's~'rghD/20h'_ #'INesX ;uy<0C\/umAY!". pgt+Co]L< (V|%RHo&y6SU@o AbL,^X| ?3|GR31y`Q:nvm6h<"OՁFreaC6pQ>4D3x)̮!9r0媲ߧڕotv<@Ic?9.UbX2Ag 7ތ1!3Bw^ө&UԷ=*|D=DḊjzeKXũg[&׍~r=`!`: CayqNDj6| ->HnU)MF!'JhU$L1PQa-0ϥ㥂bVH[˓Ivt!kW~ 2[KǷ{ÉDe޼иd\?ĈSBk1yhPmT|(q:J@k#<+ -ͣ4- Jf$3~xoJl@=J*Ln[DiH+jo[EW(;bF6}c!JCgu/l`& .@H^yhcr}ɉHq2zQo8Y`H.W]Ţ1 n8X,>vje FIgUz/% eO4q$/(eɩ8fi>jŊAtqi.}iɧsU^єRMPxK D H0 ;4 vAָШ TM[ @vDng]]ҫu7RJI\,m8c݁30m2\1/;~S  0^ּ=4VhQ^I"tYl^3?;>֡k*?󨸦m EʲJ3'VN$I\[oa {ٰG E(z)Z iݩ}畢mQF`o&pZ% 9"^.Z s+ja8 $ ˧:`Cȓ9 V_Nakn f2>ƎpaAWU6-C `x,7ISj:Dw!7 S8r˪3ӁH]J 9SA5/[BmGx5NoQhfj*1Dt; r>nRzy}΁14IBmw c"݄]U"WnO`N?w R1>,Zǵ0 ηfYymUɄ2hGNdvi`Yr < pΓcic0S shi]%9Gߏ`Cd[kHAm0ZXq-a՞5gTBD$s }ӥ g?&W3|Ԃ3KRDзsw$4|wM|Z^yKA[5?3~6iyЈcciVɇfٲPIUB;VY.O$OS\4%&KyQ zބh#:9L)CKRbr(uf5֑U=F#IQrb=+CdEGZYj]//Gv>@4V T5g#{5v/4$qÉ>#̻ˣ.;0S ~dw6'٠ol*V3wC-CG@ط3׷A#{GBc[:o'-q+{)gv qB)^qJTC{n`al;BN|ӛrP2$z"Vܯco ꄓ?n"=GԘ=3lB`q6|ޫXJ|4sneیFqbJIOT/@DtB ꘬AAQ.`+)>C!oQ5} Ow},_rFcD*x&̞JOZ#dEt#ɪ:_mjb_^? dH"2උe- )q 39 v/#tpq0hu~5L]8CFaY(h8^!d,Vtz-:: O[W_"Vn|Չ^^Q1hv+8|ӂ:z= =ZF֑LgfJk!i!jD.qUENV@+LNATEeU >[4Ʀ 2 L?Q*Y-魒Nl7g.K3BfNE0ѰӪޣ窲3݉O?'x!9߇;55ϋN{of492P܌0BlTBi(r U?g?[3> 56\^:ߡ4vW1\;p$|_= 0:啂q&T]a=6LmkMYTm5(L,߲T2459fE:=G/Ix$]G>+ )ir)j=M_q`̖OC 8aHw C\oG铰 a/{mX,q\Tx/o9y 1'noDb{d3mj2ڑlAo|/*'zcg#rqbQ#^V9xz+(oϩ#@>'p#Ы oƾPi}cI1ܑ$fil:>Wr!&P8}yq Em6qN?o0}ti]*eCl9Hk':xB=aSz Th$<&Yc;gbS:l-gMXŦxO@$׫f@0zWڎ0.9>wm,F@$^IB&Xab M FIAnbesRr4BMCYb]_8]^q'>#cRRnTB;s^h,E[GϠ,7 o!**at\T_qjLC]"*U 3y>}wBB@9o]ЊwRi2BH#]\Fn'G&b,SOisAvbI"0l O^B!l4o/ҍ0WLo2bw!R"qȑC6l(,g&cda8eG!R8\הiÉ}<=*ROÇL`H`7 /PC LI(q}0n~s Mr= GfY~ ڲ8 kTbKy9 _øBBJ,tg1Yj;>K1\;Fg̈́z׃^n<, #З+r$ǝH>1N\U5^1%sIW@cC{&d_ VS: };__E'pA8|Adb~gYU!wAٷVtN) q#g+u17XI B-~sO:4ij4@{[W丑s YeV0("vA&3X@R16KnSJ1%ڨ3y3ʓi0.>\FIOKxQR hvd%(ƚ9Q4z:t~=cqE.LLJۡfa/["2H?&4)䨉P)`kb9kC80)2=W0D)ڦz|i&EmNDl/)>lo@]vtÁ{g߽KN<40 k5 ,'e!BN9wK*Ef JN 9i7'4xS`8Gq,ɸEU3`IܧcÇI|#U] 1֥: #`shZdS8qU^Ě+ q֙ɽd*|\؊uJM:O-,\#Nwk/Ȗco}ӽ睋ܨ4hG3bYHw^j ol7]Ko1.jpl_B("?\Jupduo4L2Uz8exz #=|/Y_čPy@u8!X !SYeB~6U =aa~ga3cgdj=zu\@6e׉=P&őSXƧ9_wQ*J4'@]j+`ax}ח-uq?c<|Ɲ2!X(HnQ`Z D!z5/a{m͘0)T 7%\fX-8jKʞd%=1a—qHhm5A{D@4L8m|^;2.[y`᠑MʜҬ / tԾ8ц1z[xPO)Qo?5faث.NrdF;x#zM2?ktH-.y am6d83Z&ԋ~>" ~Y6/;S2s>?87P-Z8GGgc\dOg(m6ʼnIS4a.oQ(~)ZL9a.0gL wVިh;GV{_4 : iU1`2j>–]x);tǢ9oUf'صq] `K~e C,dWޑhQ*CP +En3+& * /t2q89ZOr#937UA(-*stg.kՏI^Ҭtˠh+) 6e$h 肿t-Ua uq F&u4*̉sDj݊.wDQ4E1ahH*m{@t,o{UI3z%5.&9"?܄}a OJFsj@Ԑ@M/@=]Fǒ;OɆ'졊C򛟞ӾƖȻo-Kd\g\&97|ڕ 2*q>Hgj!k"|sNWtjM2(#s6W8-Тc Hsec ]1W_NzӁ sl%9-FJcmEIdֺȳ+= ~ B~09qVqd}2K|:97 Vj X} Riޯ8YI;@ Z FͨD +LN'h{6ttNsu!x>CX6>##3L'L11n8(y3>:8]Y)3Dټ19˹okjFRS JN^ lNγ4Ѿu<7ZLlr=hD6:pvl&)3y aˈ*]g%7oh ͫ'J캮(d{)!fOd\…g1,x- _=]]"ѡ!9ZLg=|/An|'0.y&p1YE$bX(3^#q\S>LL}/&WuDzI#QVLDže,g*\9%zg6;̨^@) ƄBtmʝj&ҽ1s*5(\WIooV(n z#F?Q*wtͦBc/8A7 łݙhn.(ڮn/G)#â8גw:9>0:Zx*=tuu[uRN8|=4/͔nA†.qǪ.q=u9̇Դz}erow~/KE(r!TwH<>SATnqs7к߯e9Z/9yس-Xޭ:liKHԼѲh7A3dSw ;ssIw8pǴ#^^h% p{7qagHaNrxk1 &J;T:6s0 ޅ}_$V AZ{{Ü-eJ_AfA+DT={d #~l >jD$JB6T/a^VCSTpf!̯I$~>$#>1́ΔRUw<,$->ԧ(W¨ *0tx[y>Me[4p6j{_G+2AU2퉀騟+R\@=C=wbbd`qFBrq{m~cB1j}b@*9b4q,gTMt,Q7`@ ooen_+; A|]{Bl/SH;Lj u?;f+s>[ Z@4fWfПucKl}7TȀԫvrg_SHScrgڄ@Jl۔/mmB 9w"]@P[HF߀]Tжfd/;_+!ܥy2NlTMӏܺ2ՙʣ_L w޳a'w 󭔾&: yzF4!+pg9˲E8_ϧ,Xq[Pk7rgBlcY`,5F^/ ptzЮ<Ǥ 榗{f(E5H";+=~ &)_Vll"2 P*(Y^i$  J-ˈ`>"q?C{5۳?峒%2!hvF27ekk)xC]ChMeK?de'`OKU|1KD='`|5t&awh _Str͌X(oj9c9 <`B˱W!e]uQr?.2V^&' R1^y/W eЕU8G/sպ2®zϠ%H>䅔<w[(8op(Dh,]=_pal_a39N7-+ ZDg܄ tvN6f{HVTajqH? Oo>AP꘧.:*޳U: ?MN`\#.42],Xָ+1t*S-31uZ\E&!tvHOVNî<9@cp,pCk[{S]CCF >bS£,-]|Vh$K#VAH +eյL@!p|%q}E eYV#4AaҺ&'9=jSoAa28.n@4yJ bh%c(a(Hš.Ua A0P'q~h㵍7O, Xݑ KN}{ "Q(j3U$ny&DS- (oɌPo lpLʺ*W4&Xl#< e '7٘wV0/fb8s9NaIPL!_Oưj1`92}D䁃MHAfT;%O}‰:#y5Wb֞mլQH1MuB\ XnMt—_#p㆜-w4h>2 $@ʦ{1]ڦ>wٶ>Svo*ׁ=z(3+R,*i*td6kA  `?xFJXMR͟b(7}Ap%$Na7]rY9;R9ro s=*jmbs pC:}]L!>>`pQjAI#2:`ИBd r[?6b}Nk$C[A6|4%ޒ-b<voRMOpZqOp6P׵WpkQU҆-x1FHe;/P}T/ MbG8J(J[*UUeYZhC!{[^^0G(HȢu)%N/#4@ћMr3eY"qy|JR aۧVȱU{ϕ[RU^$^>!.&iO(K dD'+OnT4yG:ȮUl2 _K5{u  )|!,'q{uIE+Z.p`% 㓚)GMU(X?߉~r]ޚ=0}o8sKL*gC?Yc$s1#ω`-zSQoxsQpn '1@Iǝ!2c[``$ q؜8٬yM;:O92; n35`F'ÞT+-W*QCu@}jS3xJ<Ժ?s ^!!D pGq?6@be4D}鮦kE//_!fU=Zp|uoeA9|3]J"ޟ}.@ MnʡbX"Cpį* JxVQэ&\IS:P\kmR)Haz ~H4|k] υWW!aչC+olC< *ĸ.'HjD #cFo`f)䧖^0/E0(; >pbU{E۳0"|`Gʮ7ݻMUn$F.Et7k"-1*Lʦ_'SVnיIllvР-~]7?C0ZvݙeONnEƫQ~ `hT$5z 처a&z[w~_S`'@,_͈Y!gGf8$6B{6DC[Bs,e%JyB%MS9T+ 9T КI`-amI>JtPڗl}9lcN`hرFɎ;Q9O)0PQ̃-!))\3 1/_Hа{Ů(<40ucZi[Ttފߛ[4tGQ˼)WVLAi M=X0#x(bV_@n4k{^5NZ+R4RQ;s~Wp"xT1B(N{*ttyV>Xl޲svf4_  㛈(/`P{qN-8㵅".G?-Mա6%1xv(Ϡ76qt9P~rΥt VnH_u60C#-(y-ǬJ6#e[Ijx֔D 7f`bXk p|C05MJD-Et\ :a=Ե7R^T: (E[(mӁmYdܰd\u.ާ~3lS^sG9 zBʀf!u]XZYlѦ(H-qʷ!dN|wuS81_Skj\ B Gf}l&'%!Pwm$Z,_8t)C[Fq&#HfM4 G? E,$`1)r;/ZPUKQUnȫ\srG^p7\ *X2'3 md{BP*FxBd9xug93R[G} Xh7{ f%9Yu#d]oG됾Js+6-Y ~/!sw[\5h;|ў0CClKYI'u*mȦI Zק eiLLp}K5AZ&o'U"[rr?kZ#r阾Ƌq󦤶y]%dcn nƦDӢ)%0]nyTOmlήt |r]WTۺfv:̓9 cf5ִ\I+im oyɿ._@$b*וv D 6r;!})VljNh :b~= Qq%BԠ砠;(wi3\O{vT-%ܟWsa\bas6_46,th\D+Q6vh90_X[0޸cs:rHeKjI@&(96&M :`cHL皐BH X/Bm{ zz +B͊3NEeų:?B A)gUmwCT aų#ƞl[- nV8}P<+Qh&b^氵&$u ?:M?P+I̚>,3 f!KC]:7DZc'FXWi ?>\y&)1EM*Ae"'IKDJH:dZ7AymݦR厮)<]ĤH%c,8j u@T?R]q?9x0~xP:bK=)%WĢr=qGK9"@r#g<:Xn㰭V?-;d"2skQD'ʱywx¶dà`j]@tH|FU?mP wP ozš9.݆y7}pAaa;5-k㾝Ci,xz YW? PkͳJcLJD BɯD1_inJ#|}Ct_C'[Wz+>$aاrigReE#o;V=0^ȸ:l'gg yHr"6;vq[!ux)o =Dq̒5"ٮۏ |_JIڑlӣ9;Y$2w4M-oܹ1<` -5XRc8) B8`NbPo cƌMrӷAbUJݣևױ3cDzny]eBP8{!A8Xa-f vhd:;VR֥Z dU~,cBal2wkg:|ҡ[ ؎S  ^iEKTr(t;yz"7^5ѠX~84yȯ9%|o껨Ne-bsd3!?PL8K)iroռߦ_HXR[^2BYJ_WW.FU+ 9P:Q$7sVb{'Ŏ#`kuE#5<|gY֊%|w,2wɓ^{뻷G$FkRd4^s疙< 7'ۨU%3×7e)1@4zYjjS-?apĩ~c>͖ h}譖`yx)ҙtzW@ʎcM!Oj-1*&Ob"?Ҍ%N.V96U !˔RX_f'o6ꯏ G*'h;vuKǓJlBt>yޏMO6yl'V#t"ΒwbƷPFw0Z3Lcׯ^fJ명yQ\+alr ,-w(ůS ?זp 2y͈e ُj~9q6.Ɯ-?LOHVw700?ۦkdcXa(kOuZQ{p J+PGu17Ґ, .d=detj ٓ6kv) !iWZ' angҬԪeF,0ݝ}̛cd/3*|Jw^ \_`} _*jgk#;K{> s4Ɲ6ěhr0n#r(tҦnVlaVUñAs~&΄29b ?z7Fz*aц3o I24{'ܳ@oZՕB@g_} ֽGꈬDqBNʮӋa%=`F6i4Nۓ/@ [?yG Ø7!pRiU kX YGK4 H>>5#LL_r6\,^[%^U L|D ?-ě(:LvF] )+9j#< !?~ԟ!Cq"hZR%Zf p2xA[hjj @Là5IXɵ,2Ne.$D"J[ܽhFCCV> GxnW9 JFUDĈܵrN,~DkJ=z `]ҵŌ?WTQ3e#XD) T.nU#/" }P:O,Uq V;IlE[et sv'(`-U"17QUjv{jRWS#('PN,CD[,w5RtECk%:ez]icb(3h6$zRSrKdo_qȓ:d aeiz֭P``^9˃Z tEc<)[sYJ'0W;_?;.rXzL\IUxK︌jHz旹bn6+ C0TA"9saY,phvP{GrE4.& w'jBNYنP? tZr}gGk^fB@X/jTw ɡ:&8 nu37TqL(ft̪pj_Ƣ]VՇی ag$5vaoz>N8ɠ\jƖS&JQlĵ.|Ch[ZC0 ˭2-Cݷ4oMjnhfe`kww'%)>ѥ t=Qiců픍?˳9<{}{dZbS #ѰI"ٿLg#5F)%R1%WqߞT 9F4iM<bҫgeL8B<PVEsu@ cZK]7<zS,/A;8G%⡸TQ  kg&YVrWݑqb?KmJ9K4:~>v,oj`+0. v>@A`DcEj>H.o\*$] +y)ji%Pǵ =.mkJk]DrDLs8djt c}N3BL%* kJɦpRFBF "(~NtP.EQC+(bD"V6$_5V<*rHx`שsò@a0RaMhկ7?kW!N߹$4Yp>KӬR|!Uפ"d) +CQN&/꽷pt@ͷB rݨ/K/ wCр9jDel* 3|o g݇ۢePAMY ;QRѽq6gsc(9{mіH{ϯf2,;qXqZGM>(3YEK8e_ނs_CžkKR"Fs&9V\Od!$;ru_a1Cjnb0ăDdW#{n[&z$Q8P_A&1q<*0U0M[~9 fy ~VYN%ِz\q]:UĒ'lH=jy=V&Hq~R9+4_ @dUϸ u URtSM[ m&0LUQxx,]6ס1j\KkVH|s(0Ӓ՛w3vcqbOqչ7,@ v XxN+<`$0n*;mBZO;MؽvԑGe\&V_1wQI7=e2wnֺC(lG_ѣs&$~k=jMWykL& Zy,))1 VƒVթ4O~Хrm#ccs>˜ ft|C;Uzϋ2oBcv4,\sXs%cQ:a/|\&Е+۔㱤c4/Lj=@ɠȺpfhUii ej[נ0tnQ,K9}S33X(JTLȁCB"u*v#p'4E`-'25̟ɡ4< R}>T.+I:Ȳnc4/t4` Wg 84K$qMoE ;+PxfTh]+QPD3p{4-I?t ~ %ojDnaAg0 O*0Њm8/0-;r1 ӝ.{|=x3%B& ƶ[]&#WJNs q*-.ʂ]x؜qڈUƱWwKϞH!wlNq;fT{^CL +SVLS\``:)E)ky |ܱtȵԁw;3Ja ؚ)+;۰D_"P, ᙞ^xLʼnhhʕ鏘T DO}tËphrC9 `_ѭ ׎gFI 7E/σ3.U<1J+2Kfڨ~wTnZPʔ?z0CO}w'j\Ϟ )o2hnt @hikF~ˊzb'!!<nrsX* qٰ9k]0kUWE,Nr X9]f՞zܽ\!-L-mһb%N˂Fz6},a EC- `j @vgK,]E**;w'Bh_(Ν@*y59{:7'yXT/M:0J25doPy@Qj_߾Y(Mp_ [x^(fu;A?WϬKFrUK~BNNz Яj4(r %%4w/6Ӣ?$b2 p<6Ϙ ɷp:{Rv1l pl4l~P_*AD}D&)et dRI+y?aTw #,ۇċh63/Aqpa !A@6\f}@ʃX/\-NG~LIߧ$zKE9G6Yʽx *],)uh"$Rw!ikeQL;-xJɐ*(3ÏeV<.dA<f+DZEt1 JJ5! >;\oFS8o'>d.I. fý6^)2H|1N{Pg/X'=ϴqt4gDz.:62|^X̔}g#|~"4I{EA:: du\1wx_Y(| Ngz}VZ@p[BFz{X&7eDWK_vJݵbaSPέx ?mw~@8(bz3Nq424ܪG2upct b؃|6+)b_3кIHw 2îv^hl%I2I]=.Ʀv0ę&p[7k{u)Tm%aiI[Z$@7lҀJ*3]$`I+daSuG|0O/BkuƇj +I&Av"@bҧs1Iށ9aO闹*c ʲQ{a5sڽ H' @a ^qu:BUJNmش|q턛KEtpY)b Qruz~ 2I}r.FT]ҧ\S{v׫/N>3+lJZ=kT:Ut7tR[̯~3_LBj7n%e>E'$[5ǫ^v [|t򰸓C'\kJ0J^2o{n;loXeX4-VȈ6>}}jeO̡KP'7[>BZ?g862fE(GZ\.响ǵ]4y)RNNO]yC >R:B ᘿJ-6WZ!^ DpԁȩzHw5m 21䳑O!eZ՞ !X$+pRA?GN$[<}eNwl@y8I\FI㑒a(ϨukJSU:61O*&2eըC}Ǔ5>w;#';"KxZMCS%wjU(AFK9`5sGЀ; %B` E}ՠM$YaF.@KN8g袀dtc."/PU$lnʤD"HXsg]zG\Նr!j/@C@c-!,IwuUZ`;]2ǎ@=T[= ڃt8-c=:EקSlay~2p%* tit }DJ_uQ 2VQj婤浠HA~7gVV*1|pWaۿ홀ot"IszۇQqpږ,TzJ lWCWgCez='©]'R`NORratc*t 1, [Ɛ-ƊеOA1lٴK!јO3!=ťDPFD#F1" 7DMVx[ 5GSVygl >R "Ti6jHW*9N(_e`o;EV0#P>GSu8k.4ڥ G7' O@dȱ"ߕ_E@wu|^[ߡB*jFD4Y>)2pՌ OS?9埨$g,y߬ر*_g$k0i^}hułA>mJv4_>{T3#gM!QF{lRbrlQf(8'FŽkTMsT:T⧻[q摸RqUXmwFV]MU\42OX,¤bhZ QNO[ŸuJG q਀iu?BhyIR0\^toVBϦKq(A֧A3l[*L([)A๘G'"97fݵ#ZE M6-4}JRlᙷi+.;Z#Nl;#nrb9lZkvv! |;*UTq)BhCP<7]ܩ29bbH3BBQˠU4/{?] ひ)m%m6AYݍLl85򝲹xL@xujR-K]'A{Ge=P7`=.q7xڎogG7܌TT7Ӗ|GD}uMrr˰Wbô\ +B\0 I4I)9IMQ5wkt:1xx8"q K][_=RZoX!6K/rib@-:X1#UEF_ɂ2"zIBّ4(%9%GQj 3(JO1* Q҅Cɰ L,ȃӤQo'zkh$db{˪ٴ>Nؙ:|I`+D, U; GTh7e^d5?wGc/O].'~ýyİ89jd.ւ7Zprhء5gd60a徎n_0W$/Cb3|fSL(ތ+|e]T-7_=~_:fZQG'GCN=:BhbPp=ފ#$-pVj<\ߨWPH$ݏ*ˈYVrF+1ii_ ߠi+kϑd0{ +.9e;j*g_7L⢊K(@'ƫT8/2hj.{?]H]{Z `Vλ34AP_TuM8x쭘>'4.U՝̄;ik2`s'oW85`K;rZ#m]ap 'P!^l1Џ>ܜ0,EZEA[N`.Dqs`"{ MU̕ވtKw# $Ĭ*nhB6e7b#g#b ɠ|ƢǍ΅iVd LhGklŒh;DFͪd %6Y1bxe=VvR±6:ТPG2uOU>,.ڶjef(ʶduѓA2♿W KvP;:pfq>u ~@DLTPL婑;BbX|Q`c3TT b;ўBfObؖjƯ,o[d,urqRØC-VBp*a ?^Ũq] gQL$JƱ6xQɝVBLXe$2*#V` U4YIuI,ݛTr~6~H Co4/UDxGۍ3s%d #̸CD{t|B#4i&{ "lq[{#1i;%^gK)`J(4vHpZ4EȺN|gwm3>!,|8O㏑JFcihgWRh^fi]_Z&9EĀnnуI!XLΓPUV ل%@bNL>ݚ6>O |)2x5*ܾ仄eD97Kt"ˊhR_qK^OAddU! Cc M.]30}*|i';Pb/65I|`,!GKhl1W[ETXNb#/^pO4a xi(5k!9"wӊ,@ao! wjD0C8b;uƱ̩iƅ`G/dR<菎" 5\FVq.$@X\3W<CRx@Z֩V" a yBmh ^v0'] grMWR[Va\Ao׉ NJyE$쌡^cXt)D(?iqXxaW%lġDΒQ?C >v:ȼi8DN a%Ex J"3SљMPbH|KPT]}̎ '͏6v`!@fP=z_f}(Kqذ~{SG* )EY-I>V8߮vr;u$o;&@NO'xRoLsDέ[t7E%1^Y5 ƺ3iN~#& <!:`=h6%1҉qK}MB&OyyjdXJ0U⍅SÉ"τ(159;^[ x`3n^`>Q Y7~c 4E`,'29q,dōH~(cNYdk-6+z1H@d]=k2XGnVɃE廵@ !I:k3wV0Y.(@NY1PZj*488nC!:ZԪz%3pI4. 秓\[,C[ӕ%^;fzXz{ xLƦJU 3j"<]"3}zGgX{ec7)Jεp\Z Kn,_4LeIh,J5 S_ox]U2(qҿ](mՅHC`5žnBBt`8YHvL2=&0Ը2C8z.t܁ڜ\Zx-g~?֫H7[qתּYGJ^e$lY-sdZ}+F6G_nYʉ<]cB5v4f_F$4NԸ] +%yh ȥ*m*v6_@uFFJE6߄ҏi_xZVgLw ]zEpdP篾mxr6rXӟݸ2H̓>zYFK]N!w N#i.}2=lbH_ 3/@P/Ijl6;Cʡj|iIoch:YjT_-5\b.5'Kksy;eR#syx@\OV?U7M76T2GRNYcpU!mꑚ[8AEZp2߱|yi P*^Rs֏rv>"l$&l&Y!JG|PfWv.oO;EzAu/k ZcĠbd"R!=eUEJi'vAK+0Y|9FFieORT]> ]Z Rͺ]%Vf_mKQ13 a:tTn_ΜGٸD' 5%ߚ \"~q@קbs %NAC +O#n2̅Z|ܒCQ,,gEViHB~4e.<}vgp{0+< [@MrOJ剑? {LBG;)@0 Z4xMkz(CE3[_#y誋`18@YY#kw],9z?:dwkA",qZ-׍΢r Ȳk60iB"?pZ\\ ` [3W3;?1|NsKt|l|eyDfxB񘛘 qz(.,/$VUw7@qv7dG UT'D^,guB؉$y@:/ Ǐϊ3؍<9sb,Q@D|(}۳,cM3s˭i@2S;{;= D 5ZZe^#"9ak%UѱY2b]KNu.IH6>͌B~'WzpJ>9FVb-'*xN&;&V 9- @+PH:@S/ГKHGfg:eI& ։ >zxQ((tV10?9fX1;# mݝQYN;*05+vDQO*C:̌%} d' @Nc{2qԋօxA|Sf@e@(V֏bdJPܣq}1OFBntxa̒d 鎺l/ yPVYT5i[U"]Q`:KgUĔ"jݴBOAm:\_i8|4eZ6sWѺ'c3"Ic҇8aHb{Gb&*-UbֲSH(0[杮K~~ ],d 1~y 7,dvtQJ&0i09N);)Rڌ|:kfyEwrC~%mjKqB:XѢI'PTAIȓ9,o_#SGR1Qeba߾xx>O=Z;?\. 7}Hhc{U ܮ7f(4uEi$I?9,\2XJ4[07%Mg}|~@ qyivFKu Uw啜&x)*v߭ڏ*,mÙ<BCdQ`5HƗGGbɤo4@;#Gvky<@ #}F,{ Q0ΤpEg͍Ao''UޙV3E A+£4.2Ab`wJF ,h*1@]n t&Z:t)Y@S8Jo!'1cj? t 3EG; mn,?Z8%EO+="ʵiS.t`6#6!`!BΕGxͲ@=%+Hwcdhp p$IÈSLYh!7t_nÝ~4y&lxyA6;*6I`AMB_=pPqKQ.gU.jd@GcG~7>ˑ7Ean"54pDZ9GY| [e mAzY~\NUiUErB.ZCqV.~>϶蘂CyrޮP>VWv%Z:"պtA #E*y˘ξ V6r]mFU ,y%6^qC66E:kdhGQ =,|6lt:q, {1:HYXߏD׾ۇN\ 3_vӼWZ4jfCQ1ErʸwyRl׮Iuy#q8]iѠ`d"9BZs *Gu̠45-o{ϪyhsOda?t{g;\p Nd+kP'N,~AVC/ec(MWTݪ1A;$N+mŐշ%~ql :W84|B 謕_H$e<ðϳwF,ʯǙURLtVe?Qa\o)h0Ɍ;̒+v8$L SGgtr}^xJjRF]5קkPɟ=ǎgW;؄ZPW~|J7ņJK~tK%K~K!s, C ]I $Ӝ!@(^ry/%19ekQp&ċI_€5kӷߖqCv&O4F&5-ti.M&U)AkH?Xb u9$#rP+Eݖ9 ]P=00׿ʢ '9 ^AR @~#3@1[1(pʣգZux( jDSzrF+7U!h QҲKSn5ڻPIT/j7 zfǐHWڨ~5Yp{Hͣe?IЮ"^W2+0l/f߉݈>c9CQ)"r~֋Q;7c3@y i2Aڱ#ٻ9?&CcpDNL1; IF鿴)I+ ۜ4g#d(BAGe  :ԭ7T:3Cn"FM"%v[%OA]D j=@_K93@GUrQ -Zx&.!AH0;gok+p%,QU|AIZeHiIN1zpSzAFli7j XdV_{`DKK롅J 4 (f0Dh¼5J]yLIoNR0 >oG2vD锢xV41("tJq="4]M`JPT1>0meC/M"聐\k֡l"-]A|_^d|^2-7?1Rzm&l9+ƗC\oyk~qtBaFET+{Ġ4:O7Kk78kE6%_>6oKT(`F՟IPX(MiCLKRw-q0zo42Mts@CMN?7=QAJ`2+{zL3V=< -pNay[b(+U-S*)5g6ԅB[^}( `:t@4U9[gy *ZΩrV1徑 x^"UftmMUXsj:#Q=轿l{ې s=ء㴱 ȍnXvCW3?Q`܋f(:o~.Zl&%iO.WΙz_52([+;۾PlI*2o# <{l4xEHf_t-6UNh1e[Ûbz? { /mp턧؉:8[YAaϺV]ȡS".{qeJQ-Fyss*"6Q'yR7R> s4(jD_ۻĢCaZ W!gam'o]T~)Y{~a4 vZ̈8_r5é֥SvfV03pruwǁE~$c%O Gyʬb˝ۋz$O9 ChAR/g^5qUCSsbs0Bvﵸ >Z {z&-S}pӤ9V6WO7٤~'fӚR|Nj!NqLٍA=YZ/ܙ+,b/uqk#|r]VN" \ҟ֘qhgVt* sQ=1M-mC$ʻTWw ŘFbFwׁcSY'3\76.\!5[Q;оGm8 ڵ㘠V`(W}LU &)S:%PrX`C3z#U>Q&'X.6{٭Im{J6zԦsKZd屹1u ((JW!}V"wIԚ:mzOvƻ, ԟ l{VCea\c)@s}}iIFl(PB z#^#u{߽2)_Pw`B._}*e/3Z;2 \? $]ˢeLsik`Q!w7w+N&XJd3uSY-lk7 y |,Y~Ž) AE3kY)...|-_;F12)ru\LV/bA܁7Qbξb%{[b,&U'*<Ama(U1Dʲ?Ȉ{ZǸr,'U11'0K~ܧTtPgH4fld M7\+n.ST g .enc;š|H3bhH]:cϬ)@2_{4Y:^%F'qꁣdY &)vGQ1GH1`5v6կ h‡m%4`bwk0qXrOxJ kB2Jn'^XdW!eq_Z8:</ _zWp\Q/xv yLƭbvkh}wl#qKuŋ{)j޺|dd}qvsEwN%մ@?CL xHLVBxƏ%p,^VhW6x)Ǭe$aͻRT8tMZr4Q,ʆn@&!])]R#%Q~_8d1^Z' :.·w6$F^,6v_hDO&+d='&ĩwg.Gh*?+vөCbU2sލPQRD/HǶ=Wl u+uz%C !eAH=e z"z-~+K75I)o6/jA&Wu`qfWK[O؆m}&ϲo .D-%DS`iY)pbZ#*O )~Jd,µQ00*](+ޗL@LZqw|b>ٗ -et F~MC}hi-cc fCxWCCc] rP%|?k. mU&6LJLYU۬}>Tfį3uh}c'vƱVH8z)n_N%[QbeR%w 0P]ebEng}߳0HuX` Eۃa k@/j?7b1ZaMuź=؉4 EMh21WE]mԻB7z,$ ~} B vPq*Hs\Nf1h9tRC'z(qe Y_ƌ`CHГu7Ѫ@_X8K5X`)Et { ^E9Q[x샱#Wɮav ӡ?أC*b5{MC0m R-ϣCF Ȓ&.~Jv5T~þש4y8O!G6 :uE7Hn -jןE)e-m(@ ~6CMQo]#FSand34;`ɇkǿ ߖ&7MIVIIx"#hR, ͞9)ŃJDnon~q&ײַ!nx=Z?4bnjQc1`6ׅ D$4yrU$E1HX}?}#sĔ~R_N_NQ8s yw<*"2#M%Zzцھ<@Pʿݲ yN\cH.ի%*xÇɴ}|'_ͦ,* 4{ď5d›fXއʯE?LT/hȷ:k? twAš>'j9n,k w)!y&tTu%#:҅{^R`Xf%FMJϜ<*n6ylv k<45̿1 W(0fzd*0@LJ5tK[(~Eaən;ibGLo7@e}{ lj)H%$Z wkq/ \mlǧ.ԕKNJax~U)vuĠ (Θv(ށ&<:aou8\VjVK]6I̯bw>0!Xíط&P"7Zˋ2xӳ ,ކ:ޮ!ѿ^T4,Fq`qx]zB;{%VYWEVYg*ڣFϷovi8ȨF+Qlq}C*Z(Oi˱-1S 5]z,f;eo"w&n`=Xfe3>5w'z\ڠ)]bf=8EbC";IC^6NlL'y@%FS|Evp.4.=TyYŽw:ky*,MI eR*p7E7JHƎBj;\ +hEM#LeFclbbo]Vlh/l8Ui ̏s[\i뻳Y 7=G%@2;?.Q2iSw@oC ,? X%h_!0E ޮDb.8*h'4W'ڴ/hTM{g_.QQ,q^WKKm@g3ZZAq$i'U`$CV}1CNBH.~+(&{[sŬqL]uk+wSuLbj0n$tW=(E|O?6sVoIUYVWҥ{Gs;|z6CٜkH\6>;gGO$F;D>O"=UBg>-zpQpڠL.@fiXs$p /Qi Dr Me 0ȳK'w"t \⬣GaSlLa#w @Jv* PP'0X4#}ݱؙ]ZmP%n~ITXuFzhyN8|.s˛({I7nGlA6>ݟUA+ܶ6cWWnb*=Y{_G ~J$!j9Fކ{-K c)*3(lCL~!:˽jr H#{yw8' _) J[ZIK-zu.t#_q Pah~ugR򝳎JH(5y-!kk;|S"GdO3_@L/Z.A`IwWѠ|B'9]-%:y(SXug7Lpqc'i@(4qxJLc5G:) BӿDN)І厵b|aR9L;.(LYt׭q(gIzqmUO Kz{,إ;sj'i CDb(NySMF>[lK^,c2/ O1KBܒL;z4k7*vPTYB7"-56\,7W%|NY>;Xby3;UUZ= nƝP0yfn􉴂grx+(ö=F3u=^6B[v 쳙't q |u/?4cAj#DmzKZQ Ϋ^oi zB63~|2H-nJEmZVD$59EY Q9veDP5c3m|}i1S]1љ/DgNxB+> ^ )S'rɁϰϙsj[BNJwDq"od12!܉}.0q]]fwSDi%Ao _Z"B SQekf:ʠuiy#?(QKiU3\aFA2iiƕKZnOmP7&l7J) SM \ Hr5&bXuޒ kSkRyʙ ۂ7R2 Uw%ULn9 D  'xĈHqZ+24,̮Z53A/{a Gs.@t[}$4߾ 6Vإc[T{Q˸nhD̒ڂ?id{z@0QӒ&5Zi aK&tN K^7MmAEo5Ѷ-4ʡlH.BHt_4”_DT1r1+Nʎ_Ųm薴(WT;]PapdZwSyD ]SX#)e