sssd-dbus-1.15.2-5.fc25$>-޺KY'8$r!gҽ.>@?d   : ! 0Dago D  X  l        B t 88 8( 8 9D:E>a?i@qG| Hۤ I XY\ ]( ^ bd޺e޿flt u v4wh x y0x|Csssd-dbus1.15.25.fc25The D-Bus responder of the SSSDProvides the D-Bus responder of the SSSD, called the InfoPipe, that allows the information from the SSSD to be transmitted over the system bus.Y.buildvm-armv7-11.arm.fedoraproject.orgFedora ProjectFedora ProjectGPLv3+Fedora ProjectApplications/Systemhttps://pagure.io/SSSD/sssd/linuxarmv7hl if [ $1 -eq 1 ] ; then # Initial installation systemctl --no-reload preset sssd-ifp.service >/dev/null 2>&1 || : fi if [ $1 -eq 0 ] ; then # Package removal, not upgrade systemctl --no-reload disable --now sssd-ifp.service > /dev/null 2>&1 || : fi if [ $1 -ge 1 ] ; then # Package upgrade, not uninstall systemctl try-restart sssd-ifp.service >/dev/null 2>&1 || : fiQK3 큤A큤Y.Y.Y.Y.Y.XqY.Y.Y.Y.4601b3592d313effe1a70c44167775b06693dc9b72e7bebc718b6c9e8b094b8fc0c5275ab2d9448f19885ecc6dd6f7d3652ded2a89a16bacd8d9645efbe8cff72a77301e3c280d38c325a68a0b9e49fa85eb86f3ecbcd073d41dd53cd9b33494ff7df7df7aa3e6ee8d8341c0516b09a22a60410d4266f1547242fbf604068f028ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903eb242cd297810b9ef608c596342885a7f34941dc467067b16004499055207ce4fb8e8a795ef0020ce28199c2d4c09c611ec680a1d9c78dbf92e0bd07001b9404a615a3ae6ff6648b9675d14cba2e92255e51c3eceb3ab154ca7f3a3abdde9f2a32c378b1ef7cfbeb9fd19b6624eef9cb5d795f79d5893fefe837e6f0d72b633erootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootsssd-1.15.2-5.fc25.src.rpmsssd-dbussssd-dbus(armv7hl-32) @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @/bin/sh/bin/sh/bin/shld-linux-armhf.so.3ld-linux-armhf.so.3(GLIBC_2.4)libbasicobjects.so.0libc.so.6libc.so.6(GLIBC_2.4)libcollection.so.4libdbus-1.so.3libdbus-1.so.3(LIBDBUS_1_3)libdhash.so.1libdhash.so.1(DHASH_0.4.3)libdl.so.2libgcc_s.so.1libgcc_s.so.1(GCC_3.5)libglib-2.0.so.0libini_config.so.5liblber-2.4.so.2libldap-2.4.so.2libldb.so.1libldb.so.1(LDB_0.9.10)libnspr4.solibnss3.solibnssutil3.solibpcre.so.1libplc4.solibplds4.solibpopt.so.0libpopt.so.0(LIBPOPT_0)libpthread.so.0libpthread.so.0(GLIBC_2.4)libref_array.so.1librt.so.1libselinux.so.1libsmime3.solibssl3.solibsss_cert.solibsss_child.solibsss_crypt.solibsss_debug.solibsss_util.solibsystemd.so.0libsystemd.so.0(LIBSYSTEMD_209)libtalloc.so.2libtalloc.so.2(TALLOC_2.0.2)libtdb.so.1libtdb.so.1(TDB_1.2.1)libtevent.so.0libtevent.so.0(TEVENT_0.9.9)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)sssd-common3.0.4-14.6.0-14.0-15.2-11.15.2-5.fc254.13.0.1Y.@Y@X-X~@XO@X6@XOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 1.15.2-5Lukas Slebodnik - 1.15.2-3Lukas Slebodnik - 1.15.2-2Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Lukas Slebodnik - 1.15.0-1Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves upstream#3382 - SSSD should use memberOf, not originalMemberOf to evaluate group membership for HBAC rules- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Backport few upstrem fixes from master - Resolves: upstream#3297 Fix issue with IPA + SELinux in containers - Resolves: upstream#3360 Do not leak selinux context on clients destruction- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code)/bin/sh/bin/sh/bin/sh cadeuk1.15.2-5.fc251.15.2-5.fc25 org.freedesktop.sssd.infopipe.confsssd-ifp.servicesssd_ifporg.freedesktop.sssd.infopipe.servicesssd-dbusCOPYINGsssd-ifp.5.gzsssd-ifp.5.gzsssd-ifp.5.gzsssd-ifp.5.gz/etc/dbus-1/system.d//usr/lib/systemd/system//usr/libexec/sssd//usr/share/dbus-1/system-services//usr/share/doc//usr/share/doc/sssd-dbus//usr/share/man/ca/man5//usr/share/man/de/man5//usr/share/man/man5//usr/share/man/uk/man5/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -march=armv7-a -mfpu=vfpv3-d16 -mfloat-abi=harddrpmxz2armv7hl-redhat-linux-gnueabiXML 1.0 document, ASCII textASCII textELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-armhf.so.3, for GNU/Linux 3.2.0, BuildID[sha1]=f78b415c5af8bc91c1c89ce872faf69afa608b24, strippeddirectorytroff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)0RR/R+RRRR RRR1R R-R)R!RRR RRRR RRRR"R.RR&R%R'R(R0R$R#RRRRRRR R R,R*RRRR5utf-8?7zXZ !#,G]"k%j{}{&-򝍨|kCA Ň٩5miM>\+ǂ2 fC=k>\^E̗"gh{/m(!zKUߵz t1zJx2,W˦ͥ: uZ)1Tix$V*';*7^܍|9@G޿aֳ~"|iǿ4f apǁ,ϼyJ9购:[ ttPQC4fIKu4 I^к$_w6Th^{kbKpUtc;83.L*V:?!y}F^C2&H{?L&9:CK6 M>zpɜέ"o p'-MkvKƽ\40E<jm[jDKL5r,nQُMH͌OTY5#!ִޗ+]f\:%C63},@4އjԛ/7zVe׋O^:' -{w>~l5m^*`D3XF)(ؚKhze_+4|,>ogX.)ԫ@z Z{ e =AxXW s)gBWqS^kzJ;2T_v{)>BnMِ.x[ 21>:4`뭒6\Ӱf>iS2`$CL.fѱApח+%8Y`U^SꄂnF*F*GXW\LJMl>&!%T:bF+33Ȁ)`߮4]co!zAWn(BU+ ?qˣA(ƽ͕F3(9 |W]!&#ŜʿY,I_CHo SfDA9W >{B;o@Reۻ*%93t-}xFG˸±[x["K"8oc^iT¡)ary7;5.nHXScK {oFdx"),5n,7{\& Bz+( b rJ嫞31\e>kw%d Hإcp&Hkf}h lw?SaIfl4 V6u}7íK!ö}{'}'JW s_ ٣ S,`g& _n /a UF[ͯJ]8A<Ξ[ 2_9R($ ptҢ AyktOv@]wM?ɤڤ{_(+8KXN㛫T|ے74 N5lA=ubJY;ŦAK5=I=)lDdIT: *ԇq1D9{T(KnQ>i }=4dkP8h#s:ōܲ6+Տ{>KSmĸ=X!{™Yޠ{94uz$V+1~G}9Hdqm#Pqb*X)IP1'K쒄F\T~ nb 1_+,t1Q}A_OꤑB"35ёys36@.YiiSK.VHR}vٶ]vNpӰTgg={(Zl6U@%}Ux!5FFn?n}sX I69%0 l߽o(U_mkd] ]Im>OJ9oɑe f@qna ah~^ {=1 &{Ō n|'C)ŦkiJ]AYyhW%gx(U:ڛOQ.NoO5Z!Wġ-K7']>]UoqZ=ȏy02IþvL^)%Ga'gjzv1lN;ė*{Ӻ44)˺DNw@> WK΢v*4}@h )OyW>Ÿ 2?c#V@ =]S|>ÿKrF+r|9sF[ S㮨|f{@"9E:7ڻ~<;< bBcF.CҚ^XH#zp1P |1jޟ$\n- p],(|j"oJ;P5/[rnΟ%,!~Dl1Q˧x4TƔz- =-z^$M9]{?{؍ D}J(/e~LP)9`p8AD2,sB>ف)YP{׍x`톰Ő0zW[ͼ C >}ͦ8rg?gjF.K 𥉉ˀZ ,)5,k/Vz)+/wsKzzbƸΰ Vsiz͢ p[s5M=OdьpW7WƝ4[~Ʉ}^~L@OT7Y0^_ CIlntX[\t\p ġ;*"j|q#OE+67l2F*+WtQb'ä)qU!p\(Z/ HJB}%Tvdu/LB_8#a ⾖t7;ltΎ` 5 -r9qFJO2OۉYONԊ02"H4@oUY#{K]@_LCGwi1mɵMȔ3 .#̚PDža4/ xkYLf(tygݥaR`Lzt^,J>M2}\fH&P Kҕ.,-Vѹ9NRh=62#=wz@ʋ0 T A쌁|Jv8zrR?7j7t(BD7)z#JW=֓LLڃS[0TYNv5#ѿgݺ~.=ʍ&\gn#QvlO1di؉g9ҽH0er`CkÍ#V2v$Yt4yhD /9E+nu0ގ1\mD%M3}S:o[=Wk"WƉ>&+4Κ]A'V{ne|5V дλ+5p#҇7a2qi}"&o7AvbZrPgJv@ A09C!rݷJ TVnRmH׎~MprNZ3I(CXfD[ѩ0em? ˤPT{r[?$# F5ěʏr㓠o7t,Dתb?¾ ^U -FQωɷ.2L-niS?g۰ܚ(c  $7_tyQ̘Ja,%ƂEZVIDBrMl?};S%?-\e}_7Co7Ph.k:za 4I&ڵ" J8r.D@2`x~η'on?m##Mhq'WxX"7Eвh{n~èHc|4atRHrg( 6*˓Pֺ3`-i}kt%|G/;1$lK xTLNP[X% U֢8P5' LQ'5i(** dq-SW| "prvnF(HFK#-/H'1#C?›]cˣ"j9X@X(j Ui{ENJAC8i*sjZ ݺIT+Chidc/ed@7ҫJJ'YnِC t-eKvCpKZ2k6wSaz.ſ;)% R5c2O\kndڣLUWE g F)ܤ K45A` GqsļeakҸtnb1L0b;j=[6N0(2o9:e3 ^*ݨ6[reUAfr|߸j@\L\*S [0/cA*n2|EoRq1޹'Hߑ^P%ejtXgw7Y֧|ag,ɟuYv!W P7iϊ[ kʾ=pVU8GA.Q!n qxad?ڏXbN޿ $ѵ> b8 ( QzU7\D>SWk%sͽP4"#hX_¢^qEC-`fao}Ao8Dkkwڌ%Ag?7:o{|w|Oel|X "[8g2 gu3}ˠj65(ƀabuŸ#e0r@R*/h^&M$H;˜,{8s79)k\J5pBB5i }TU&Ϡr=MԞrӓztU紡2vlEӀ.K4j\H[rPwL%V"a0'mG}f7,FT}e[ o"Wc\j09j`V^HG\'b TJu`Ep)f+Oa=baJLgmg,\zcʢ!ACk– yj@RAx85"HcZٗbeDOFki߰Zm-&\< cJ>qHQ{T,=K#54sk|8apaڽY]^m }p2c(dXoP"U6k";.ViW& ![W@io5y0=M3!q Q c|'pƵd  ؠ,h WL)J1--^"A[WGB@ăpr0qsZ73Mc&8C%@D-x ,8e&^w<)ELq8eJ^bE\yLZE3/!F^0ĵUNs"Yɀ<7Tz%b-Ip[/m"EV@ň"ke{Z}]r.cX i_ ˌ El#B 4Alq-fU;6_&>䖉.cG@*\8Bs6YUF Wwz5%pIa$8 +ڴ|[Ћ'anUɿ Hu_DqtRDa2]B72`=R#z}Ө$4i93mvhq2p>uӣ zGhØa=AiPJ[bǨ0گ CUCO;r~p d!j9Lʥ|7AmvE*Ɛ@g 'PڑQ+Zg؅ 2:r,c}^K_yb9V~DhW` ڠ<pbљX\ߙ5j]'GSוv=,E<٨{ʚ*(tH4({ P(P[vn'hX*a%hw]zqWMl..rӏJ5pS^Lf1d]ĩS1.30g*5Vwֵz.S7B/R@;u6;rRq7b[80x O~810n-Ί +P;NB;?:S!Q0ju`"( _SIoc4!dMhYq6~UΜ S #Ȑ-)y3 嵁k-2́&ͬ=6#г>_"dJ2.@YjsS[ߑPm"OKpǎqMʾ\+xCT)Af iygEG?BVQzײ,4ھyK}2, /㪺V@ίj-vHX&gp Sg{?XN-IaY9MEI![FLl`D3$}p৲bT0 Ņ#EyQO;C=.g/葞Nh9UCBly[ @WTp*; cX,Q rt!NC~TG#{q%l;Pǰy7O+'J 83v]ZmLE\FpWh9|Qon6 Vf].4;G.'j#diLq@O*W$'ȗ(dFۑC|}v6dJ@ ąGpʁw(|oEoWU@*Sp||Fߞ5f 78B\7'rN?o҇❇NSq>Y|GYpax@fhd:K1"\mSpWVݽa3C@t-۝kc=wnm)kLȂ}ƤVDV|A 膙\`V / ϞB{ `m ѭ>dwBvqrJVy 6GY"J T6G?Œ ^.0&ɂ邍JNe5>HZY<& }sJq *ܰHL̋CwqpSd9s 0ǨDX o6@tZO;ū=Lx۸ NdanۂMZ)C[I7z$SgiZaWGGVעr}ThF>3«vo[,-mC#NȨ%)kࣨ.{[k}وFy?؋F~Se6v65@Jb= +ޮ@& BAJ("GMUFA<VK_u?җ72eҙoF@tYE1s5Y(oǵhmt|($.ki~q}|?٠74~ ӈ0oBy3z|SfNcfdܠyR<?ə7 `uXV0nv*EL+/٭$-7 S* fOHwjk f3-o*V_5 wZ}~.}gsdDIO<i13t8 oM|?]/_›  ptY (\خWt(?+TU!HMg'-ץҹFfZ@RN:1M%*Tr% q CrKW{I ͏nyz/udǒs鉂+Ù* P PDUʹLfOfe#<FgN@7>տчjw혟05Y{oD .[JbF7Ya {n-J%%,X]4h(tmH*gԉb,e?/+h+?v#JB53Q#TjoV/l)Yښ*8-TF<1<ژfȠ(fvz';ɏ p| є0r^JO)Md+S.-_(3ZWGL9SsY|F-fuVOLAbwya>ۙKpxPИRDb*ɏyVc@iPiaؚJ@X)HEԶ+O>r ?eXzQPel0~cԵIUe#FJJp7iaᱱ( eg0yL fCTGeQ(VS~W5R?ty _Tel}1[#u!UښVPF%) 7K> R.`oe#BU)6HzJCB8 > 8~bk+ P>Ӑzc<4cG.X0hL]CmpDo`c{ "g>baOgjzQ)V$,F=>PկvJGIؾXGTnOVľ(SMOmK $i1$O|Gy%>w|uEe~ =`"Rę_oR~B4Y۪R5_씇J&k "{e QL+VoU=IK?-@"TV2a `nD4Eqx#2< *O n%K 8PT`ln{SB=@@PrluX`^8CV PSS腺\{[Sq5E{F j(:hN{~LsguGjvy$librw-sMq<f= )xAK.:mm^"v|Uo9iҒG -/pt(=NX#X!T?#uxyZd%MNam]EqQ|Ff p,ůy6)͎7A  h F3[i]|[lsvt-8ܸ"Ng YDT.!J@ W 9u\d]pYA7B}؝W~r/ad }>ާNwp@MJ Gd>wVY|Ì_^J2 }8XWqqH!⮡TY۪Cm«iph+D>c?+¥-M{[.P0T;2knk˙ZVD&iR(Gi&wGNNԀU7TqG"RD4#*]/kIL;Q"wdAjfwRęDYvUFPѠIXF{瑢a`L4ML|4LpN:pc4`y UX5-aʩ>P/T?光]E'p_1>a=9cY,/r?æt uV E !kC)$@Fpu$$A(YR,e P\':ub@vrQ#C-JLmv_ɜWR3fu䠿}N`< 2UR!ץoxɟ[S?Qi{2 v0{ꑬ6-#kAFo+L~9JU^DNEgP6=j>r\܄|eL&{ W%z'$q}4jN[|{!u.}j|YC(e(%^"yżyre#&-7Ǒ~IS!o+td$c.Zfkg,Ih|K|\I`lC(i]!nVhǻTovs2zNѦ57%7Tma֊>:L=\%@\b=@ 1!Οm$[{bg'1B)] ]E?=- ZSq-52W"U[po9P]' sI7TmC,g5{x;ԕ$ԋ7#E %Wp#U=*BulrI*5H@E9&Q "j.h}*az+fkț@M~3\#knd"m=-HLQ(GnȊ_gKݭCi ~%){QH+:|߷鲲E9bE*&٪!N!HᚺY0@[L@`u, 6HmGUjgE4cB1u3bwQ#d` $my%jBTaeufʺi) üupUn4 R[d䎎' OfU0QFG'AGWXG; `֨;B$`I#SO7bT69# U/qU;zki&ίow=3d}_F>ة(,f>bWE/^ wgY5<+>gƜ2G1Io=& Е!" dr2e 0;S߇kD>OڃМ[X3 CTEZQGok<&P'F)Urr:zoS^X -rLSPy-NVoi<+SttZg3vwpT#s]I .ڜ9޷i&jF1&6HΏ' gmT %dTS=3>-1nMEbExɓ 6fmX,M/Eu8{`!A)1ݡ3FYF 0~ND?9NӕМʤ 5(a놡1q^t缌lt*pPnW ;1q0X~ gw-IsiufqM$& zCZfwqI7f( ٽ$,\Ea PD>*Ss9'x}%}^wR:@]B_æsߔL_>cRWcn!3U:g'j@OIjncp};8c7UW4AL2q~tݜ[0hNRy!Q`2'E*A58*G *(;1# @} };2R2n0*տpwΧ!; 6SQ<$euӀ P#g (7G?_5Q7:^/;LpTy_$gP[A7DN_J8xCnvd~ < Sq+,RЛduLPo]0'q1"GhBT$Ɯ_^n<GI~ ߤJ3qN[2?Ӫ 4֎@s\a=>j_&&uD,&"Iԍ@%Tf%f4F5g z7I C3˭;7+[,,8GRr}^Cݵ|JXM2 kA|gC/.iY՗YHvLNG\ޟrQQABe nDׇBv|/h#e`87nJf}jbO|4"ya+ɉBd%gM/urFV"k_?cÐ:G')fCL pѧU }\}f7-lpTq5oWXuwX3tY5m6_jvydTr97vq*ri£,#_|E2^ CnBs~_ Au^mʳ;Zg8RF]t| zcf|V&wtdnCF/GStAå@fS̖H\6Er/1w?utҌ SD`գӁFZO"5@h"t93T&{sŖdZr@Qi K'Zst0 1֔;SJ期# "B+"F*1ӓrɔ^Y]  ]>s\ ?Ubo;t ̦5#[`g>6be9:!eƔ!/AejW.8cK4w.xr@Rë}1b8ngAOG@A،Lw&MH35.r!q[4nB("lUٮp3a\-Q3sdϊukl/.W.ieKl`r\Ʉ˱ N [k `8෈ۀ?+``.TH9 lWѼ0F}]Z'{Y3ƒؕ6~J}\ctI\Z9 0$ḍ=_'2[@ZcJmgKP<:g%4T U_eU:Ȼӟgha'p$,qyQJ?iZti_2A+*rZ5G "i$Kng{6ܥQŅp#Y<&b5:,zR`X!HeSⅢ[Z]Ul?p S3 J H*xxWIʼnS|xcb[y٪$ 3'@KLq__t9 _IIҥPqQrөq`wk tgDx}Kb}ᢐ!k?vl}Z#!\_nP*XƺoWA__\_]C刑n43SZ͹ ~9?E:id}ղ֤w<I.$Cz^NN+.5DfY5kX3(NJ+9IR<:"&Op +j4cʗ4VxUoo%mH:Ύ 5V4ѝ6DO8$k oP8u 귣icyY`yo |cS?ŵ.Q%6)Tgx^؉2{ =e`mHArD 2J0iyBzVmDoSpYe10 䧅Jʕv=ur5un0ppNuĕF 3ztںXLPC `'^k)#2T%F!sbtc Hw!LGVkiҬQ sGbsZh8kHCJz@>G&H$z]ȮlAM%*Nyq{|~}xVa@(YXQ26ыC3hJ."2}by6Ĵ"n.5ue*ol?pqEֿPaao' ,Ό)Ͼ_U ?rJ i }eSù=j,ʫjW/߼!YX]6sGwt/X\%ɼS/Zk*(]^eFl2 S )M@څGGlBAYB*951`Y"71K7;|j;@U?~u ֊UKFy~-o74AlOneH;J̍wJ;lioz?whOBt?!!V@[wR]Vus*ܺVa- N}'">vYk϶<6 RVWx+$*vnDY\ Bdw&FJ%Ղ"/x[X>W|)g㼂ɞuv*I5WSG:RP`iP?s*+d"K5!优sѶ*ܣg5b38E%ݑb@ {z)b<8nc@t)r^u5 ? 3 n\x3 *xIRxKU7V;,W盒l- -qד.ϴJb'-!Fʲ*Xg-\V^hTBiի[.1Z#ZpA$e[ {6xv|LʾMVoJ-S;w~!D( | }*>x3Z2ddYpٹ$+L"@ T'G\PVmv/Ӯv9.w\YPr(TIn&,k@V!Yg 30$7| |$iW3Z"ɨ*Ƥ aF쭘q,pZܥN;W2LI?oz2rM!gnU0rkuBWu24SEf*~tw 6$f%:@~M6DKz;Lw B}<{?^kni3ǭSG#?:d #\ k[,8'ZtͲ.jНNُJHd.Z{lp{l$[|SQ!2*S!?ޛDr0!#v߹L't"7%e1qW {u*H5 A? N⼷*1b}+UܱfUyF(نi5sL/@Hra@tjiqj]-| gRͿF'lJ^-)/t[gN(DW)p_%Kk5r6,I=9>M2لt9 ˮqOf/\y5Wp^FAviX,E2G>vVm\5zMNs6nYővfr}`,DmO,\ iK }A|rn!>N#X a771l$nH|hГ+A,o6Ɋ3:< aAyӥc soSx޼XZb*ySӕAuE -׽shHlԙF >8Y}ʖ\;ƓU^.s~FY.EBΞq0m.h*.Z17q3E1Z UI,⿬sڂ2Q'vQ@uw\eWq6C/u^ 0ZFUz1+ᓶiGk n.7Sy] L([q:T2_1c(;\c7pr5,ϦS#s@$' yP [:fgrU5B`tM% FH|6Nf}G$(knОm2@f2W.lT+L#Diua7re\6*R@6u_b%pby\9LGAZXJM+ωAKthV5"Al!-PjS>2Anam)y1ӛH$ڔm,^{3T$+isMWгa,#(~˰!P } /p6޼帍:%7b>ArS/ 9W4=ehe1W׬VBk/OO \;WŊ0pY9w> k&ZT{QIˁ8 Uf@*q~5%87hC:@x CTu P8Q%8f_ "I/_T-N vTbb56mnq wv[ly)a(ă2'j'Z@%dcA$-g;]L)hbT>tf.&EΠ\}*n* \) J9   d\ˣ(gD%g٫VrDΫ.,-DHr8O ވXQ%{^pКtHY4e'k~5E0MKJ$*>@o& G}53n$vRpD@#b9ذ+8q″`j8p\C z;jYy/R6/QApSBx:ۮg6 >i3yA{PbVּ:a->h]H8YJ]Z<ҞrS~,,X*ԯh4d7>Pl7]TU7Asł71Y *ucb!l_[#-+==C33RG(gFk+ uY{G F-8&:aX#'8qҿqML5.\=ɓ_JK=;rtl8XkMF^نω_9'3`+ YFJiȓ2\oZ(ؤ@GJsqd§8 ql܍)q;\]=b7 R)IpY8ցގ4կ\M!n^pA8 P8<18OHpZes¹`.EaH KTaˤ4%b#QN MSk pS>J@#CtterI'hȏX(EO#z8Lt׏Bmm"rerUY~/h5e1=Tlيz;oq(]o $P3XV&wA,v5c 1' ՜~ow u Rjp|/5ZF\*u㿏"-5xDbi1[ cjI* uaḿϞHxrfjfVI5\[rs[ 1#A?Ə2A~SyA/-y%%n:q@GԄ{Ls "@;A Zlx2 R(d7piK\;4C%NԖg>DgQJn FD};WcRPQ8WK>jM9cE_3xUU{.20tY;uMK&fsT-qJM߱9<l_wyY}nDg0lhB籤fRIy2TP?י:!G" `˽, 25˯_^ =3c#弑D e鎾+*zmeOMVij M JdȌېJ8&$xFeog ~.-9^-u.zln6%Nb٭ʃ*:P@u=}b,{S )P_z.d/uט`dn̥$2\IX:4q& u a4J@gUcvV?V]BxJ z\ Ćmנh4=ݬmI*}^o(d*0*09ً Ark0tyF:Dǧ8/8e6C]g 0v]:Pc_귇*עfBgrs !/[ V2DDcOc7W RoeIWfGsa:r`Քqol7ޖ..*4qB!WY*o=]x CClE/KL[McO.X@ʤuMʊB!rz4)̑X}ױ\RO~+R`չ581(r^ah i4h4?wKf  6mK?utN߉aڱ``(;F| VWuP:oS6ܼ@E+'ݥo &e*]:2n; "EhAᓩMQ(14ۙʒ~'ΆV>~'R f'O܎r_'@'z〰lNfք;(bW{vyrb Q!!mĺ2\9ּStāX2KZ K;C f$nMWVl̯ydn:7 ]Cd:hf?.]dWB="EAv1 ",q[?7<5IrCW*J`̪ |>Hv{?3smFQ^jCzbW&;u 7dܿlkm#'\(O9 sP~H'R!&CG(%C #rVkw޹&abW6kD`{j4d]\zc*dEu DK#|AQ>C^+ i n'Sq)GC վwEo8 ݷ3 k/rPi(OFC=Pnzdn)_qL\?-`#Rv f $ުΆ{cG2K Ab #zf"Eȼ.º&tݸ`?y9{)T>i>חN` c͞ uW|Zg$툰z񎀧Q9SW?YntUiֲk`f[*d@;)߰ TU=‚ɋ`yOLh31F>QHd=v@P^z" vȴʛTNHH#{ p;4m֪]v2& pe(Q%|7 ʹ-b\YbrKz>I>OQ{s.`k%ā>2l 2& PvClw'rKLj0boc少8~j&kD9&2In+&Ao,u;k,/HC[ꗨiyF֓9.C'X6k7w9Á(CWl zGܕcZ,4Ie<ڭ̨sˣ4*mrUM#i6ZW, xL$]#{+[J[ص'V4n*5ھ it*|v31qI@xF7ݱxgZ0I D.6u-SNQOejGsdM)^yf;ʢ9.Шh~0yUu$gWO#Z?.w Y$ANvĞhF\ػ"Y[\s[_#}Z_]V$c;yq>\E#c < OJ&s}IC]sI:們1)ù[iG4rl 4NJW0}?cB#bJ.I`~rĆqp8EpK(4EzY~ 9)Mrǎ?/nD餒W&ΊEx07є4˽ #m&*es 7{CT:<1yQŷ1Gp[tQq+a⌅m+`Һ "@H_ P(vvNT!.м&k`N>oJ߮􍐌o*iihWO 4EMg=S%0gkyz󹛡)K((q[Dx'˾ΧdeU_8CB,\4okt}k[{ Kf_:/ǣ8!uHSA#蘴LU;TfiCWkvfFUXqS+ @CYvJUiRs6$ (]%_Z9xj8|>t+vi@Y& B\)mfރ4"\)煪Ľֶ&rkSd4U2٫6bq٬t8E'l?a; n)ٖwjk6%aMm`s7/Tcv&xN(ZK&a&/F2uH ޽̣ ^N>SN.jhz5;'w9#߈_thH l`OP=ԋHqh<#]cj,2 5 `: d3k6˥. rYp0(԰ %lyb{~N|FAZhrs y3TG->X@WB$b'v#![ΝZz( ?Ox 9wol!yc—vV^ YhO-q *'SeL^6p8$"LnĂͻ=,@ibx*m&q,󏅙ssN ?\y_}7ҦC}E][2Sz.c,i.>ǙI)S|:32DA؈j5+!%bs[]3[o&tb}EJ.Py=8FxX=X!H4!or[ԔU{K2f5iDbzAXgy;=:QFq)Rjaq)"OH;[~* QDRe.åA(BDnlIa=E@L[pbb<w",d\`K} _''Go= ho@ Bv%\[}ځSS+H!=Yփ<1k;`e>Iy+6lrf"hRIuS&HoT&Y@/`QD0,~xnrIA`Q1^J(X RBebwvOkڕt"d0Ho~Bo;J{Wu0>n]OrU8{@1PE]zOVFkb!.9'd_Q>Wa6xo+ 8gxG_8r^j ~p(s|=IR`\Uj7l3]A$ JսJCs=l|.xw(qLVorutnìi"OL'U*52|2NW [> J'bAOctL^hg-ʮ0=>fQ!ɯB,Q]{{\l|0x7+u)X2 nD"}sJP[Qv*,&ˣ4PƶmZM}[;+4yGAKg82;4IIY;7~_Kܤ,F;Y l|0}ršv{ p/ϼ Y lxCd%EOSWɎܬ\)hRV;6q\b47Ӿgʴo68Z5b*rL|l-me*&D "yǻz&^$uvRnnٛ~@ФD?Pgp^!9fLr\x3r3cs?U@@Iuݩ,~|cbr*S9rtrxԦuHN1?Ş@%Ʒ@gnF;(xu܏ΦI!*킼w.UA2+-g @-oճ`[޷>Id1BlؠufԮڗ~$0mF !HIYL=ȓY>A~xŦj. ZP2ۋϿUؿOd&E" [й'3ƭw9Li4 M"gW瘍zH"p6U}sWŔF?s*MrdހmtW5V_ZFq"姺җ覍+QC "OmXXש5b"kW|y1y@g>( #kDNIuRY<%hҪ KmwzA_gW!UmA!ZOYK:#hQl >,P aAo`B AtjԀI/OZW;끮 WYyv׵VOhbpN\vG{$AE9Bѯ2 r ax]n/q!\2~W@o@"8:&ɲIEWyR mRVA3`iM,@ڣ4{,NB䫴`v[TT%&z vevoҷxa>, CEnFQۡJA(ʼn"]` ,g;6Oawu5Y8b%$q6 ^By"\ ka F$#pgX ǀHq/u+%,D: u !#f g(SS6 z{TFrƿUH OUIIfaV_L%8#;fHpE!zRG,}dʳ1-}DέĉH{Θ$K^Ђ߆u'V,֟7QFg}9ud73]1~u2I' ɁC'sjTCFEhq%%+wzOx/dfMc˼0=f~\MA_$^c%’tI|K2/2Sߔ|6$O:G z͉ۂw"ɐˎ /p<wv|m!^l0XRB6(lw5O=8i@1ܠUvFP/  #[GYȀ;\g7hZ)Le_=-p7rG)AEW(oW[!!XŜoC6d#1JooF f[yNQNn=;ns^ziF8^$s-3c/UqQu=+/#RK}oV Qؼ  ȕu$wyΖxMCh fE V vאm<e{CAt=)my~xyzۧ*BF'yEVCf >Ũ"PR!\j&stXe(x\SE\%\A2p~Dβ޲WZLX&`֤EZ9:&dg7s3ӔQD<8Ѭ ܿ(J(6Iav>;dg[RȲH!vl\o^Kyz491gaJHx/fYv7k.YGvoCr~=ek2YaF 2 N"q WR}l`ؤ_b#T51Ҕ8ة`Pn2Vm']s1q%͜tv唪%FV-eek :yjc0I%| լuŷL**#+_bM":&i3b;7=2bS܄D G0S6ᦕӶuf#tݴYiesM$ed2<4u<`3 3?;Fpz\0؈Vy j+(2T :4K>`]d{o)g;4~@KySdN"UʎR]SXf1U\0A'z:΀m]8D*j %/}Ks 0@֨xT,,[yF~ʏɈ8Bj/Ha&*d郖ޞI03Qua+JK'7Z凕UyJ!^gIDꈝE(e;(\fK ?%-'–"h)@"+h-?3v kq ?vEhvbA6)xtZ9ILX1c2ݳ!n# Q#;Y Ɍ>bVyeplF.& >Ȁ#R vkV ϜvgdASw.I%v 6Vݱ[<`|X+ff{-MJ ioP/|וG&އO^H;?e3Cd^+DLĶ*4}Kj.v!M3Flh{j 6WYboLA!qn"s+wla2ofҶ֡u?r`Bv; Io*nfϏ~!Ves#-hɒ=u3|֦m>U\T$)ytO,{hDD=UH`pfI98_mÜ_Ԟ)OYiWjF;P;,ڳx&M}I tU{5m>2be4LyilQ"O^2icgMM TP{bPASd*2W %Xkb3 8m!_ЬZn5Tsǀs_0'X$tpoG?~_IzI^8r# a M#W:{B9 ۘ,gK;=6N=zKѲlR+d``K\%W+e5}Z~:fPMX(/G|o"M J3 ~U% o)uA#wY0;O ȓ9/:.myyʸְ= -DbBk[ ݇EdMV0JAmM|kg BhH#+',.AqjʽXjWqph ?B,Gҥ\#VО||@7FpZ刣NF%$#7[F%Md6,6?"rj%XmwJjBՄ*1WPB;|i=]l:}[R -&N-݂ʾۮtw~_(̷ʚyhe_u#Rຮ(8 H0 gJ+['Gm}8kYǻJ!̣(>KUOI)gu 8<~8P8WJϴkXrvȄ#^$Bu5:H3j˿# G"lM8;Y+0bʂ@誅"f_D7@ )e=6c=t"HF]ް2(czEYx/eeY\%QlӂӢ#<^HqFB #(9 t5|HVDQw*4Nf (eBեPȖi7{ *"{ x1:GrgEzX_5Owq{&J09 Rr/? sa!yDe!ƘdEeV h=(#C{{FK"n[&E7 _Ư7Fy`t$ur,MPhBmg 8< UCoOA|2vso~42W_W;@oAݝ+6uء1_H3Ad'K^,:> H[KSg,A8>ȜF}Z X7;s7<)A7}[*%G._Yc}.z8w|[,DU|e-5͈\{32/u8ntP_.A86Jk?ڋ$6蛭Љ *:=^R9|0aw1ߺC]Z B-zG%:3_WҸS F6zOI3S$@>T|lhp 3k&@&]c:<|GG @U`N=}@SXT7ݘ.vlz] f`*Mn@9 c󖎠¢Y/"sQmXg,W?b5LJ޲P\}>Z߇B(&-1@h&x35v4qf:e_F Z-6BJO6(5+c龜%ZE3bku%󔌆z7 jЈ Xn[ћsF,%$QvF˓䪟y+;.F(v6%=تn 8' t Cog k q1U:C) FTJHz=_h,2At6 c=M6귰O}3coHME`_@ROA̕$bTx" 6к~2RnE^vpe:Kt;en,^0d0Jc@vڨ瘑7DfB?;K9a~qf0W1DŽڈ*u"N CƬs51q[z`>GvU]'9YZ^60Uv~/z#D鸐Qj0ؠ/#("895^ʅD: ,^ ƞKRׇӾaG2SYN55 -K"u60EH=m匁GzSMgNUsq|9V+O&b?Ce=m`DVaŦPy=([;Qu~7FY|U}Su1${AA Q')iSZizXPZ-d*bb RHͼ>p oyq.E>]ɐ1MDoFǾR؛{:dÿm3au&14PfW&޸Á>3"SBuc <}U*_5[ g!Y_nSCAvHk?,1>+@ GƙJ:J@|WA8ra!csðA/g"O,{y"}3%suht{Ra+l06XGV9'qUy&) &-r޳u\\e|UϨO&JpyC®[ЩSr3i#80Q9HVkWNjcP$옧t6`EnӇ^-CzXJ;0᮷~ꯐ=bHf712o(,Va׳-S5.v}mpZf_Dj"xv |-Ҩɼ@,X 4@wVVD[\M>Ca71V.e{[ƍDKkLdk,Xo0ק(Bs.6SAnD-ԨMދ @Uu6Q HĨAL|x+}Z0Ӛ0HV^h0~'ovpp澴zuЫqǞYаjƫ؅q] |a rk (՗(21kv|w+Ċ6Wt*(uǑ4"I:fhLlצpt$S#/ {)36ۮ"2CQ:ݍ#S遻&*7ó$o(\At*i3>GГWS\)>6AN0?cUTІIbFAUrՄR$y> JQ GlXOЌ;R5^z~RXK3B}UF#"]R&(Co/qZi5-I'q{(w47=9&4kdXr="QИdt뉓f,U%izPt#$]I2I$[BܼndX0pUkm光hA~zЖwUL<Xua<޿_&aetT]r>q%aJ5? ͲF֊hg/D54۳i2M6,Rg&m\Fu\v3!#f|_P1AP1=Ch?պ@zՑ7xWD6t)?.At|bU|v)ﰍn@ެ8UZMRX͈oeO[&ٶٵfÝ߹5uy2舾7s 9nM]YKcugy29?YyOem RP G|q;QNn`rB: e&#Z`-RJ6dz)x 59O3(NXy2ȁƉ#by3>B*H ӾS[]ӛr0㐙an+Ff NTn};ҴP;w z֓[YTdm52EGx<'w?HV$7HfDtwfM$/H ɻS3%oe΋ 0܎df}>x]UdS&_3GaagTYS`$p58ZE/j)[z4MSYNVgmإe0MyEKfT#,rSkUDzgMR ):0OC~gVj+y5GD1``0,AU٣(j IocG貚14E{}lz0#X $-C1W4{9^Z ?ϩhV9.hƃD%ϝI<*)7|>z?~aq׸ܾ70 ?B/K?}/7Sf_+ml29PKXk#2eh1.?h? 2* e19@28 !!k;4]@`џMn`b<5EƿCË?j_.$]t=՛1y&z~!Ji]&l}PUu z9FOB !݈rͣH4ғ&ﾒ&ztPFWF҆֞ls\J$H,&F',)[vԢo"Y塉DV=KP%+!K 2Wn2e|36_ C)g{xI۾ eYyKKAݞA"Kv,mmuu1+LS@OB#~;RMXHʀ{&#RksnU燪 U&_yLˑg?Mh{+EI-ۂF/uz*^+D878a.##:Ӫx:)Ywy P"3 qngKQ2L z8BPZQ~ie5nQ^ڱX[hNBPtp\P[_b ċ7y  Ϝ0u,)cJSE#I;Pw=&S5Hԕk#g=&N;ݛX(uZ?Bgbu-`YZY{1JrHT&hLɲǑ{(oxؓ5 N(ɡpLeC/5 ؾc;+;|[/fCs" <ց;r[ >Ij7@Q@r!g xfM0%Uqݓ"9!aIɇJ`8+&$&4l79 ٽ1w]29WӢ!R#0i4)Cu˶`ia ++7/0R1ۅVW})G0Nl s;O9QA !?_#S?s|p$<Y;{&"(oʤ R,|Kߞ$ #ŤX)tMǒ yL5>1?(M`=wDÄ2 iKfVoC^lnIۿ~BbG=,"=Qݎc ia6"U,k7Ȟ7K;ICT?H"y]pZ -nbo|> ךz<_Je u~LJ2{8dӟ/)K9TgL>\ROd.p&ȁp^(@ ,@MCv.Wp"0n$.a=~ݺG;<3G*}^YsJ#])Q[h{ںVIdр|G{}ќyĆ23ZO}dM *|6#\%ڍBʾ Vw )\P̳$7Zփ\!/x+n'4OeEA^A!~Rmo%O^-~a)-ޯ#Oy?5$׼ƴ!BOobVXC^!Fv:A%g/GG;nLEv [l3"Fp>=c%>=*g4+59߶1È}IU;iy w=\wģb_RӃ"8B~⒃ihl5*WFKZ]93ah@&3}S1BEC ]&4v~5x"2SS̟4`$$(:H`>n?OlNV-v?O'2# %.WD~>\h!Ju uH/,}`- I` o'e͸whu¶KJ prPBRn]pw.П Ӫ)A &TX8¨4{tB1d2l꟝D5xŃ_#m/,/Q^>f60>*Kgߘ$ %q%Y!|{E4X7THg~=AUzTjyQL{'nYгMwFRIGYLKS_}Ra7#.RrmYTsk[r#DHkF`^W$rsV(&XTP7CT&V:yj"@GG^'jim6c9e?e-{ HrrغAs[=FM_VFq.KE霄3Ǭ޽lؠ 5DLc(ނXb{X^,pFU ҳTW>Y7" {/4NŶCc+Q'&E:֣ tjohfX^Ӎ(-Z .Vlrp(z`N1{ng7n f.z]*WYlEŠؘV:R})K* i_[^11ͫ\p--uHG 7!|Rmy OJ 1{jn`pfTGe(bd?>t`0ihqcqګK*nƒx^Jl\kߤ7l H#*ê&XJq{:GMx/ÞLDPOF)̰brNʷuwh 2k+*ڼdf=icb */39fFـX";.ai,6y#烕Tsw\Ԡ|ZEŚ16T]j%|h{ub|?FY=>2>!|DCu@M3@`W_ vGo?>@@-&ic/zGIenC Hzo,o-8rq˙ZO7v>CкJxS Jac*)  'e?> ^Q7/ݾ)TeN@Z_nn^`$<~GKZ(7ꡍZҔ94ƙS x4(Ҭj!n: p(&sEvvo+ڨ47Dx;ȑBILj8Z_>u|kcH*Nxʒ}mӱtG>*\8iG*YN!6Wp,N%b^@ylM?ƭg|T2`aExO"ڐ7#.-SxkaEI"xm3+\fǪGnM:rhs Ke+m.dU74-|@}YߥTp)x᷷s3=ŚH*%r8_E{XMOEd\4HQR!k /H*X/͓p&ߐ [J Oҝ |K HQOPh n` bޯ"@{@6g1ɜ`>I- G@2r64J UܿGk6O'LʫTjfsb}+> a)[e\d)׺w?kRʾ^TṠ| hjA YeߒYj 0 dF.߃+X{1h-2ˢ=]z/9ƞe]re$7wտ&%1]9a sݙ#}mie7z-+kkd,˭o(e9IK}נ!kSu6 Mb{s^bC #Ơo&9͏vm7ko D6hXKc:Le  Bg*cV|N_+7@p 1ms xB? #|*'CqOɗXq茢)PuMC`r"-0dw_73?x0K>7BP[ C LS0RӒ%r*ièt@MK<8+#fziЋPT$EGη.|d'yY ~?-WLr>mG m]sp 1ԣ`biY wד,SuʨK7/#`6-Yk/͙%u }r/6;<>řl-o}+*/NSmD8^L_p`J*xɎ}b-WnLg 94j>/Suee%=pE2q1hEDmS tBkSBɢRIMMjRS7D̼]9RR%6\6B|^`7[](B-?dKNOBru5R"VfE uPeNuq"d<۾d$KO7&Jw iC=dHl4W?}y}1"Eӂ|KxZ MFƺDjye-pJOB%}O`EIhJL~ٗ\ 4%.'p kRs@n(B6l l6;EzSmj٪zw+k]ݩ4i7k'k4H{b%aCNݢ%n  F+Mo:|{[t(N^ѣ9 5% ӗx+2,47hf "mwe@qh'Y 04i4+%NTO z=򲚄tN"K{{\#yu0xIm> l%7u9JK! 5B&uLy kqZ6 "L3~Īȏ1NI9c+Qj.T& LXsX|`$+:Tsg%"m;BnVFח}y1 #^X, M"EףΏ,EJd&LkIѯAؤGNuw}(2Y0%%ce~\ ʗbyHNij\ZO~ꏓiN?^%7Bj hq[\Ζq"@8!!*tnHY[x|QyϿag9Ry$T+Xm>vSb]wX>$ӻa@?~%=E;?vI=rԗI\RHQ.QF4 S`T taY*+I\¦1 ʸ1W3r6R6 +C{<㙰JHT7 { m#m=H]@Ѻsn=(3X=S xs1YM-R(VrAe5p.n؍Bw_= _&Klѯz1'5ā3%7)Xx_ {~J= JtTuUޔ, @8sS-:զqqI9hlshmUWEy.ʻ?+upq2 ) :>=Ka^9. E~q?(@̯~W`jA \܂Δt$CL?͛%XQ`Ә*wKB4Wp:2̃ٯHB*N #`wΑMLU?^JltDЍ8 /#Y.5 "u[3 sΘZO\R"X$x"?"<5ɒa^5Ryuf3X(K2T6d#Ç dx\Z̑O<@AyqKH]Rc0ڣ7x jr$=;F䋉S/箃ݓَ&=KQb^sTy[rq?@tҼoWC.ߔ4z;&ft*-L9 wXCنoOUQT5|=ϊbj>ቔ} +:rTWVOwwwi7[GEdڱ3X8;Ċ_YzA†d:7߀R'a^tf_} :qAHL,~g!Л=%'eMQBۇJh;Baey kE6,L~LџԪ{'MVfn1I<KK5QPg44wZ~!HQ96MirEF74L[8cH&0o'ݤVyf{5/P{οO卉hkĘx$c$o\t8P#0ʏ߳5rCOMXqJımp:" O"ٻ^Gtrϒo߇W"9*uMt\IV)cs4QӥF t)CQ㼛k_*jX׉m1Uxf1۟;Հ{bԌ} Ƣ"|GmmuTfDe]xwOv򅳧Mz_+Z/orLĸ0Y4h}<1j\9ϹPw<9}k6R+vM}+Cd}R.$LH#₺S5XUiUd鮒yBt}2[TsCXPc@%F ;w 0鵃"0{1M/5!wz E.y(G~,f=Z/}7Ѽ1M`eLإF<) &y̙NxX[Ӹq{1:{,ȰAW¾=Hq|! #LpY=%/e1Ld yueoٽI?+ ZB觹i=y/UC #XQqdt!+['-%9Uư̩`YP%(^>s܃?Cdտf tU*uYbbm5Ƶ<=רN"fP}S%7Mv.|-:pA&U&d $&zSD8 W*dЯI/e`˛~ٮ?vPC{>Y rp)J&O6z戧k pr&Z=Z[_h Ml O&O>Nw={$uQ^F~˩dV[$~=xQIsna 2ߠ3iuϽƣDM:иМVr#U@|ԛ=P+G ٴ7Byt s1~|L۞iw[%z=::lSp?n|m \eu][lw<="&¯&io^`h7R]Q"c/n{"X<3nE,KL5#aNtnk}VWpwdRärb7bbsRz5ZʛA Y@ɥ&v9fmJ[jA(x /$ꞨTXmf<rh3V)+( q*/)< [vз N=%wW1?S<=?(I)!Q} LfLk ._ߵ?И'*D:nw ?@!{aWvIb5<`kOwЬE0`1E1r+8uΘ㚣b*dɘ}k]2D_aS=5@g`Z,Iv7k*jᵌzw?y18#TPQ&xOl @WKf3D(h/t%&W=i(ci[B2SN sqOvjתoj5y3?CHH \{:RϤB9-,C9K6D?^Uy+92͖B#O=\DJ rL}{)q]](=^?XXY+ ;.#:H':/pm*1 [E%!NX,- lvt^_k|˙&Z Y)& 4eRV37`ok&Y3a(M}ZΊ'Xl(HޠZu0n̞8!_" ӎ5FI[\=>r^ynu"A! 9e7mMmk fvA׫ڽI`⻖X3y_O\$Bxd"o<\3QW334.K N 6~[V#830sc8\0zV(5qv]ϝ:q}Vi 5Tn8'z6#?ƿUO巃o(jζ "C6uRtfTnAqHC|9,4VvwdrNI(6D*]!2e7yx4kiRt7 ,ۍ4Dm{чaAW.{LOq]+y, :%-]k!*}uCXb*Q&;9 ƥK킨ԥ e`W.5_^E7DFFYꖜsoz窤짛lM2Ā#\(e ]h4-ZLد=\ͺ-@d +}75$B4p,??79"P<ըd혥Vӝ; pD&MiHEJX',^pxg|*gؾf3[W ϊ*}kiD'`i#@2c`rF퉶|f4=h%5O[n]n p4^Ky׬c*#IQqÈ5: D/Nh~^ &mğk7\EZ*Vl[pwۻb&Sxly'@aE]X &BݭS,E܁q/PnaAJ~r18 hېձV nb@|i8rGMK&LL,c;baMDͩOhg?3,םMB~"Z#0y$*rȯ"M!5 ۤ'sTYm\~wVu֠ȗ`{cr%Wzn`A/ï N#uPg#au}I|?M-,2!4tȻ8k]DxnV1PL-Kkh%o=pr 1C#Ml~BTs}-(0i_$R}XF1f KcbI0⅊/igP кN, b#h:3f}km|<qPD8K\jL՗AKܨ[nP"M8K1fK3"́ל MT6ltl Wb?>u6tl㳅F6_QV{G$0;_`iئx+4ro A$ s6@ cΉ$PKh9Nt D}' ҉H%\\X&|쓔^=&O8#$3ZǙ*LM<|]?N2&gwK,B4>;ו;Nv4Ñ%Ct v߳`?~xiK/ `BN)ēEEXaIXݢ_gM^-Ʉ/i,~&4b"N-![)|l}ǠjQft;z^A_'> 0.y"gg;e#\:+=巋 |3l5@yv*͕{M48c]t% p1"x$#H=n#, !c>`E<Ԗ!=qL4ყ/L:=ͨle u2A~ϼ4QZӱL*B`s`Ֆx-:УBf]@k@7M]oD 8.q=5Яg2_0=7v$hi{Xx|#\O6HA2Q#ÿQ1 ʛR kJ^:{t%඙)W C{.Ҁ{hK 4'(`H-i__*oJ!H"`u,;M;]aaP=ԛѽCwy]Z/Q},ɬ2K#FveL5o[Bt%So6O¤2NIkPo/]_3S.{e\E'\^R 2O~,#0[d}S7\#lᓶ?}[YiOk zY2x#n-}=}.ǬlRe: R9H0~K]C&5y6YD'5&)#5?Krʩn6̋&dc/(,n\RPX$aPz%g;SF9&|JpZ8;%i04{:wh hza$Y1@ > ;$:QF^ q6խF3~֨5!}XZ S=*K!z?9W .xcmN>(!5@(qOjzAȯCy"cʅz#}2)P 柸୩nN?OW8<1gqXxDeP N.4/8WXud 8 ']4cܝ5k!^9ӯNWm!1vIl2o! j|?+*mmh+7")!%NP| 6TR#vخk#/zKY$W$GQR:ڃXinpNNq);0f9Fߟ9k94bӌؽ&+Ɗ6nb]2o>ީY*eW^GW^WHiQVzǡ:H( )~$w ψ1l _ BH[ק9ig-7B@uQV /@v*.)lY$hLh/sCtsΔuOߚi*$`!FGh?MwN(7ző^UVRukJ1by&6kpK-?ݴIub!I?KuY7 4 }[SzDAɌ;7@RY769_dW|dDž:KeAKc&*[ {|2y$1qu?:i%yn0L<[wR ݂a/S AeZ~\ ik0/3GW6Ku2{arߍsjnQ*ʷF+#hL0ɶ*SlJ*Iv9Ioqd۞Q;%m|y`B1Ěi2~v1~#Dƣfk GLICV؀f{Jm? }`I# 0}R!5rAJ%xqXE .]_G;7O-# L}"h>aͽhȁ";%wS;{ìI6 S0]E DI(sXX!@߬RGIuGYrG*zb=9+pt{azkOކ}pgB v`}\k-xknT n/#: X>̴!*+ŏ9 aN0i5jfbMu2c\'% ko]hwPi1=n` zf&^9ev6fnZ訉d Ƭpuc4Z;|ܼR܊o{j^[?N,=֒'j̒jfC$=fulY!@(-J`Uȧ[:g=5/A.zX}n)R?(bz%VYH?cE5Q˅ŦeYɔ8wr5v L PU0 EUOX+]>77PyjBe9Ս}vxL}"S嗕gE Xx7䯡Zk4ۏ2{j p PҤ rg4;JȦ`^F@fW( niBOSo,D{P<ݤ{qHF ŀS3}(){i$t-G]?]܈RiDfM=`eaAV4,P/r]?z`H.w3ƽUZGH8_g^N6z7Uip*/T`E4Mep"BͷV@ωJ(a| G ~ΛdHz̕If_8gEylv*.p}{&ު&5VK6'"4Dt)#n=ܙDz4)ёN U ~/NCBygUh&9PO-tūxҌEƠ^ R T 3',pd"dALӍD :IȠ+NmڐZ<'ЇIɢh\SL8NYa )lc`BSN l=T>V#dZ=, =qyTUϪ&z3װTc)[@>LjIbV3_89O+N~Y坿˗/S}kq6y25Eڱ{e@5a0"_!:|?B=W:Xu.s 3+J436G8uOhD(-1 MKݢb=Sn߯GjUK@M^*Nߞ/$[͆AYCtYo2I(#\tUcltӧˈ}QI?p's'*|.iRy؏]֎gCzՇ%P_F{ zIZh1 tW 0V8]5d#м˯57F`'c'oĨ}]ij<JsUL M. E+Y$Em}/t'hWA{%97o!HM 1%gr8U+s sO0K9d%'O<%) " jF2zHpCjLrX;ENc%7N^f HK9<*[E*=5PӒѝoV\ɟaęYB;y(R_ ?`*wr.)_.+Te\CJ=%oOvX"\q]jX\R5);11"a2;`$WqR8yxw햼rr=fK!ӏdIVmfYcתJP*ڌ ENl]P=civ/9n/o33s ճцw}N"S9L0Iv^"v٘]y#?>%LKIh@pϕ{ Wu8޴sNbԞmE#-m#=qnez7N&}) $V /v- VGo[RdNMȳCGG~rg=Z[jfElg;jEetd]?x]{\݃Y9xs m;Jrk'8E C5Jj) $&4ptZ EV/:GaylrMFdE;NxAYkGM\녴}E ;$ixb#a%Ȍ|M \A`{8^\D.<ȢLuwz3KKnf@1%?3or^C52{ou#'R֦EU: -"V>e״לa35pМYCcxb t1i/8>D$<#+xq7I">Z¿śfAB\Hu?[iwcB;=Iӝ!aF7:Jw;HT$-a6VhA F0u a'VGVZF2Wdz^}.R1w3b6C;>U }Kk>F3`N*ު?Ody(fwW`SOL2i9o^.%ӱK($4qT/Th;oV<.eܕ &cFV_4bU]3󇸱_l*\0#Z{6Ceۛ.ҥdHIy$ .d 63#75l> e#'XVI(} !bIL$INEf`z$`폤JI3FT_ _V?XR_J/xs=5v|;ə[vE) ݕ.ፃr!HγIXw}LyAZ.L]ed`O꬧bi-Z>d1 S#ҫQn8P&9T툣ۓA'XNYYS1-b`=# DI]@\ϊơfGemӥ4{}Wr6_^ O`AK2EXړx KPp`2~iC`sB]U(1l[#0 mk0k@ޕ#98r+=F>j ?5Gz5Zv\\Sojs1NP3Yn"1~@sey5 / A6B*M 5i~&Cm\ZطM ׿>zT}܉I4׋_ѡ;eBqN*8Z!nI=))\~/. n|[I2щɤ8_$>fն@)9QPFsX*ƕh2kؠd?c;UFAM y (%RX(ݠUSץ~6>ԀjJD,ԭy ƈnN]** `!kQ|~OJDpsƖmEjJ鷭 x**$_'"eaVHdlM,TYɻcg= 1@B4k011\3qo4\~J9C$6s%P2< Y#W}i*9x2;'FՃ8k'hL5y0W1 3ɮ@؏ +͂R!><)EY'S8]T d-FlB #;w3Xsgm0*~f~<;HE%LCܬToõI&^5pYok3ؖEnlf%_{1?,Leak1D+ɇ$(F R? ?H<i ms9ezC[}iQ(E2/c* ~}q Qp n`Yf&;MI[2noha\o2AT촭 oW[ۉ:GׅchQ͈9Cђ|P_)qE#(P5h:sz..xMX|Ukl\7k_Iň.4D q31B*:=R>ǷX@6k_?By<1G DpO7?{IEiXi' gi7+~ ](WS>sY6[x!pە]k&fL#&PMRu^DOuHTx'Pb5/6|YʲOdaEdZ8{~XO{rAl5 J<Ӊp ƵIxˆ=g9ν!ա`X}^ C5V,s= 0[^4"|ZPSJ:1 S酝ʒ[R 9>G9oc… 8\hX(dJ^D Q!v7-{T +3t=q@v')L(T4`;.bvioy>9*f7/"LBf5sqkV-#e3+5fS[d7 7lR<;n=-*SVnCK^b+r{tؑU2T% CH[(}ziS 6B$* gnm(D?Lhfa@ʔgNibrf # 4PPwRmJ?Ld#z: FTR:(p+pw 0Mfw݄u2:6F!0 )́6f;la)%W:hZ4s5FUCpyZ;'Z sps|_QЀЂ9dIMĿA~GBg t2VV(Ռb1dҏZ[Q~ yl oW.5N'ENccֺ,;gN$Z=} ]io ;^+-Q N}íHFF6䢞mc2F~.w~~9}2!&`>҅(cMN=u̕*{׎Dz+ku͌]]o[H}˷E79ɫ&L[*zcZhu7քbp%VQ!@r?}ӟgN零xaqlfR.z8.eY[Y НM14a.h- :o}TT<RH:ԕi֞p(HcЋE}YTjP3 HN 0mh]F =#zɓ0lUmFYie65i|#7lΘxQ5׶tS[˃׼_[hG^=Qь4TZNK ݭa>s3#f(|3`=)cq,ޗagC]P}oȃq2 fVt <hm>S9|J%Y&9 )p,^3Z3b3 & `5>Ou^6S{)mv5w qHYm@wwDWcں7BTӲ=9# ^M6}M瘝b u \5#}] p `2xHYD6Y*'>N7{ųЃ3#n_nHy,h &z5ahG _ }roGՔ_fn¸D#j8AJ+^h, ?s/olw\V>_߃ϡnUnu7P] ƞ"?g1ܗI/@[g\Sf?D%a苋kڊK#MX!ݭ:%ٯKc!־IpSTr+k U[Xcpn{~?W chz^-G:K{ '{nc2Ugfabv 8" 7#B,tšV e.с3O4&ΝLo'1-0mǑ熋}XMu!>5P L,4{do26t8PNGED qu(Z0tql3!&ϞsV~G4\ #P1BʂO? MNtkǻf|?|-5MVŒ'.YI=aRܿ` J֘8fEj@x;-pE.[CJW垭!8] wOojhÅ,PEhbh!GwH@"(45vEͮpZT94pʼn*4՜v:IJdkvFJ(wBJTmd/ĖE]U6IԖH$GmXtފO(#܁}_8L®Gs5W\䢑-#[P [ E1Fń$q'Z"M>һvι5g+>Ef*!2RFNJ7pX-\\yp9V*r ZJK RHeG$Z': 3&Fۀ8ӑJN+ălœ %\^PH$ L[G Ɏt´Tz4+VX?G ) (&y3“:x쳂U 6} `q&$q># xr&m3aGD iņڶ$}\dB`P 2ef?,1A jGW6Ng2BmI Z'H97,(dRak9,:5!<RZ8OvP'~)0 BD6#^.sF#'1F. tj323PE㎬7 .0{0O&宾1` 7l۱#濛9Ht-PZS+D,V/$x&/`&T8Y:^HTo;O0CPDSԡa$`3W@3KpOg[)ujv-r ljȬoBf`gT",Ǜ%8]6HlӘ8Eg/0O@:؇qer@ŒJ;L,CkW X'QU" ;6(=lH#!9D.7F#Ta$FaL.|:A2߲Ǫ*,;OC#W\ Z0\GhV`8ITbZTʻjGH48%N4'!p:/&KtTRt) E\+uA1'~[։w^϶!^k, 9)P<& ݢXofD!PSyta-)jF03%ayiN1HJRJ٣PCB 2n >?!3{*(dVqG bB?5e1ç#!$So6 1'b&\©`Pj6W/^f\#j/,Jv=LVO4rNye|1kP{3,%OYc?E;9󏃒\gۃ) {$\jZ=GSU״|di4M !K]A@hz ]lJއM[vo '&WD8y :_~ir[W )]'p/`3|(}*?E4 * jBnSi,8 5l-8@G]5-G %ջgrp V"bԚWs1)[\3q2_L rD2SKä?os8={!epŊ*o֎C>6˵S]d&7yV]yEkU7~ Kc-%s̫ mHZKj)}ꂤ>/q"b-P#㝵r%4؊.L~䓟bVyYy=Y]'q]B  AdQGVûp}"dI0?k4$wE[3 Yhpv'{a Bw+&JP0@'xejnRLxvioj4&̜ [IQ Zf|ù\E<ӻ$z"A:Uwkd q0 ίIME9hSahh:Yv;:?̀xglPb0 Ez.: F!F*iA,g^,^uj69^o ]mխ)>j|yF $mAL'͟4XgV9t#I7Cٖ LBV,<|/96'nඤwūҜTѹZ@*4YRWyޭb/C?!kzD&J5,'/ hCF*N v㜐ᲙO$:M 6 HkNMxt2yQ& X+DHH*4vJE*꺴4% Sh c'i15+'E?`hUr%Z]GgyōDzI?ѭ02WY`}"[`/Q,qD\Z&զdg*za JD^gBE0L/;yy){RA∈p* |GFww3y]Z"z$;Gn&5{,]rUKS2BңT@Q$bX0aH sk> #.#,zWO-4[DXh,Ϸ1T1Z( *r!7G}lJbiNɷsk̙?)߄w6: 0%Tt/?q?@5k9֣7ˏb`+Gi]?cܥYA~Nb̖qoƩ-A1/N>|xz:PnyFk3>x{^#CNBo9!( q_ kE rWzpj>I$,s.^PsXLi-3e(f*>x¾hf(j["\4> fpS Md#E` -U6{sR)9I}"3ﯻ '79GQ-".ڏݪz~*(=b׀N.Cbkait_6:.JAڡx ll:Q |Ь >?5{iΟZG9lc uNx.fꦯ!ڼ# z)ZIsDrrEPҡ#1ϹNqkguٙPVQ4oVؐG #%eI!$@n_Z=,(X 2i59TiYDD8E?љ 7Oèz=I㠳gnent+4us6#x s?4guqԼ㛷~v#ʾ­`R;x MlC8{2<>#3b:a45w(".sVGṞk4LXiU1 ov/ ϑc:7|.?ywJ9١Q)>0=­b[P L~蟑Zd$\T=YȀۮ;FoZqZ,ޚ|^ 8v`9I.̰Y־"b} ~{,Հ+ca! kc)#Դҕ[ 頌V3EnѲk9J~t ])\"wk1ho>O@ /3}Is/#*XS*wG`T\nlBdܟf+`tɻMH'<ǣ9J&2F*vS.,M6-%ptƷ٩_iNwf(Hã TG(2_7=-7Gx 1l0ZմTOS(Y,k,L36;5Xj yčL~*T^I[OeS [)کUhPc#TZbʝ`QlN[8„04.6Ʋؿw34_73%dQ єuS2.}EGKAcC c9yRNǠ~1P)#5QVr3(¬dlyu.Wƹ܅agi-& rT[CXJ憲hCܐuԊr<5:gS` ܑ1?&NAÓ$ i"b_$=F,HELLq+l" k2~ba3ΆV:SDowTF.$ڲ%G?xBch!Ѡm_/f.7PVΟbʉlf~ď!/c{ܞe-[,~AOgDDЩG:(䋀T?[Ҋu 1M5KCծ& 4[B7;)U)~ƺ Z Le]XȆ*澼F6 hewAo^9huUQF\N`H_~딍JJ1,J?|Nz`-!A̘>D}ղ@٬SݎoA9.9-fWHQpxIuJ-5D]qhja,Q`zZ>P<_仵/ 2zthƦLsY, c1vwY u_==$}y42npG͍7^ jF"C#?\H̚z'/͕ nH3Yl)$[oݮt֞0}2VuO g0>}bBkh}f?iˢl7%v-j =:GϠ6T?[,{slq|i2Y"ê>8\6%-w" * 4f; V6N-%@~:A`jY*yۮf\;;˸ʴU w/d0E&sǟWcDZc2,j_yrh_9H42pSDnL:TE}Tz'ffЪFdϓL@oA0e5^tCV`|46ST>,"냭?hԍDWf݌sZ̍ޏ&8"iVd}MaB8C %!}OʣяEKoٿAbujL;w"x2[i0[}OMQp>FSΖG¡IDcy v~]iShRIz32k&'7\-#*`&P,n Y][fe҂ MبkWgM *?/Lj\tb*Q(2~ʕzҒDh ;b]5O4kB$TYq)×^*0_\L`]ƚ\j[7zOkH6\RٞYb<;@=Ϙމ-))U[^<,w#g|A"W$$Р&V:Z&SM$j7~.5p>~fuT@ԑ!zđUqsXw.~odL a]2AʷR c-r %2ֱ]@I.I(5\cUVbZHsĩ~>'@oCa~0˺$;+bƿfhE׃)~9 P&>1wPgS8vKPa VB sLKkEʽ| ZyJ%K3P!1UV!Mn;T@GRy2,vۣu.1 ~%i$+S`2;wcxJ2*xـ⤶ ʵoM1 N!഻5N}3|ŻX=ڤ KoUh9NЏy s#R|Ή 'ڞs¼HK9MkǨ5*VO{Fj֕ioMY̱d@T[4@_ܹ'"Kags0)D&AB`/`b Kcw8fHb?&x䷬:K &u%QKgg'y w25rP$S̿&©HxRz1h66[>%A$MT*B\_#:%G;ځrx0QQCBoUpQЬuMuCѶv<.q/fnyMŗRgӀ!Z XCna+}ԸY̯.zo$kz~1$x{@C= RUZ {,3X'EU6i[_;Sgdv=l5+;9%"uO&=T| 2eޤSpTko6bn /BVKk0*4taるnN ka^ڡ%8~Jݜ;[&DK+Wti% \ /Ku`FMK~r27k}i/k2EV_ʕMCk_ڈ`xШ0fNRbYN 0~J4{iVT W3]3;Z_ѯv I4SzM>$rAxOq/펖Ax3rr`],wώߋGƔj[.d@Yۉ Qq_duqBJʕ? 'P[RfXbK견/YUQeخEh dm|`.r N>~ hҡs'[=уNߞ"2ps:iLh) kaGQfnΖ>gzfpFn\JH^ĕ 6ʘx%->cziSmgh9Ntu`;([߅\ Wd^ ^kBtMP3Ulo]`>"^2Ҳvohgz&_K{U)K9,DN@(,RyF:4ջrO &̔z1~c/'?.^Tp Pf AIL2C''[KALЦ-/k?fjଞ>s/Od tPy o6ٱcv&&u_ \(y3hmNgGQuFhpP?=Hda(= (QmWhܺY+ғd:ѸH3" ÃEQq BF\o،+I:T&%N">ccLk>=T/hK[k Zwͦs: gٶBzq#]>AW|nnykc6 jfLj?-< TmֿPOK,!4$Buɤ3Mls`@`@!źh-=N4i2T^4x*ӛSU녲MJaV`D87GJ92ްbTxcB~P[jNNu*32O|"].e^n>ؔ$aWfij|PEdf55#<tyPGP\Y'5՜&N݃[q X$ iA83 Y^>ө퉒LeBhIG4$}3nz[bɢwfM/$'?ŜKwEa;3$TU 7Ok 1_V`dFt$ԫô+A`z]L5Jj !=rB_?0$ad WP$wcbS OeF@^صP-M@S@1)@*Q["6(_vX DПb(M]bq/\:ae#LR(y&CʆoyZ=dhN̓x.T^=^Ҏ E1l nbpe/0/.|=Q(F(py_72d*/j :0b@?zn[R6fD źrU I&gv^FK(+S}ٮXl܎R]ݟa(ng{oeia;NHY^XEiD[ 'R yu@(d%-ZfA 6{>}P'!7Wg$йZgRt#hh#!Zf×9ՙ0_"WNKM5 nvi fjWmdO"b+ T7ҁ@Zf3c6`M'LsH+`㕴Wt 1mnIqcno͵{XQ`?MCuʉ 4f}m%e8%M{Fr1Ulk` Y=X^F2ܴ'v<ч+lsn%Xonn 3mU@] uEۂ:(xh7&\ Ǔ׮{FPo)lY&$jkQ:C{畸BY猃-,xi±JSF34_}S˯PΨٍ#-heykTƈ1p}(0Q+u~ +}(%҅Lܪ%?؝Th}r) ;|".~浌o!ˋͳo'M"M31A-3luhR1,/eZ;SIdֿa||K" )UhW\\E!pt}D)RƩ=}2ѱ(< :?#Eu<"_Λl8.LM "~@ F* &@=Aخp 4f.7Y>o}[,_.h[:t 00Jƅ뷬q.\7+6jij%O8; _UBM.\* -j6b( l#~)+t=qCb&̿#` c}gl.Qק͐kdp G{E#P}u)Rmƅ"V [ZF;HL8a)a7h@$x,^Go \ϒiͯŭ5:(s}_me#$'Mu!^0عy)h@dfs*]gL>J{Æ8zԞbr(~C`Aq 4,gR1.,c$9狪Kp{ggnSy 0Yqt? W(m!n!E\0n.+3|}!cq OZY豟I*|lխ)㽢rsXC>[( iZ}q8NUhCquQбkaπ {&1t.[#g,OcZ8B%kP^G-P9.ļ8^_LcNB-iܩ+"/ pQa @7xuadDp0́˝(&g2dL8~\G46#0šWjAԶ YZ