sssd-krb5-common-1.15.2-5.fc26$>vP (ǫ >=V?Fd ! \ ! 0Dagp    q xF(89 :AGؔHبIؼXY\]^:bٞdzefڂlڄtڜuڰvwtx܈yܜ(<@Csssd-krb5-common1.15.25.fc26SSSD helpers needed for Kerberos and GSSAPI authenticationProvides helper processes that the LDAP and Kerberos back ends can use for Kerberos user or host authentication.Y.buildvm-18.phx2.fedoraproject.orgcFedora ProjectFedora ProjectGPLv3+Fedora ProjectApplications/Systemhttps://pagure.io/SSSD/sssd/linuxx86_64F1@KA큤AY.pY.pY.XqY._e4743c30835b364fc65290132744a8ba64b98b47e86582dd3b7afffd18985a1163f8223bb170c294cdf2f7d4b71c1d856b099f577a237fc32002271b10ff8b4d8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903rootrootrootrootrootrootrootrootrootrootsssd-1.15.2-5.fc26.src.rpmsssd-krb5-commonsssd-krb5-common(x86-64)@@@@@@@@@@@@@@@@@@@@    @cyrus-sasl-gssapi(x86-64)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcom_err.so.2()(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libk5crypto.so.3()(64bit)libkrb5.so.3()(64bit)libkrb5.so.3(krb5_3_MIT)(64bit)libpcre.so.1()(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libsss_debug.so()(64bit)libsystemd.so.0()(64bit)libsystemd.so.0(LIBSYSTEMD_209)(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)sssd-common3.0.4-14.6.0-14.0-15.2-11.15.2-5.fc26sssd1.10.0-8.beta24.13.0.1Y.@Y@X-X~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 1.15.2-5Lukas Slebodnik - 1.15.2-3Lukas Slebodnik - 1.15.2-2Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves upstream#3382 - SSSD should use memberOf, not originalMemberOf to evaluate group membership for HBAC rules- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Backport few upstrem fixes from master - Resolves: upstream#3297 Fix issue with IPA + SELinux in containers - Resolves: upstream#3360 Do not leak selinux context on clients destruction- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code)1.15.2-5.fc261.15.2-5.fc26krb5_childldap_childsssd-krb5-commonCOPYINGkrb5.include.d/usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-krb5-common//var/lib/sss/pubconf/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=genericdrpmxz2x86_64-redhat-linux-gnuELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 2.6.32, BuildID[sha1]=eacd4f9aeed9bb9c7406f14f95e2e82e01e24271, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 2.6.32, BuildID[sha1]=175490b75bbf5448728ded625092f3503c7b8f66, strippeddirectoryASCII textRRR RRRRRRR RRRRR R RR RRRRR RRRRRRR RRRRRR R RRRutf-8?07zXZ !#,Ⓓ]"k%}}`ʛ`c䆨r.{y%F Wh^c s0[jr { Q0Ⱥ-YngVUh-"u;{Β!b`LéXU/q{(3WXAfݥL [H(OmzUߌPDn@_x|yW-9rPL/4 >~Dv9$d<8 Z+ֆ0/_8]z" F5㲺yPDlpS'\ U3BhU$FIQi! Zeur ūAIHph+Ĉί?]Y:\|pfʇᬭ6$.?m,Z43d^X{++K .)8'^|-F(z=:}Nh$U]9(M|J*]!k.VӨhr wf:s] U&#YC(XW~]^v#Ũ}ZeJ½@s+;W_>(h%D偱tyZt`g ?bċl0SƆ: CDK _vhNp-UK`Nc +LFyx|C grXߩXosSi!~Ȯwݳb9р̭@Z8pn<.z??^b:Q>je{$uv.j3x8ƯYr?D#͍de-~Ҽ[V^\4P e$ *O!PG%{Vл,V|)Qߴ"f9<;Uѝ4,m202:A\8Fk'fg焫m3N7M-`䈗%Ur?p +ζWW9??*ͦsՇPmw.li5p?ِa|$( Mx& v5֑(0fr<;nTLA[GpWtLR!/?Ov8 V[{}@pkZMʤp.O֖q:{;s7 EDY,1+<7Jm: Z?eMg' R/վ'!@X܇[@ƺ^dCL=,`I ռ{lYTRhf<>iWyR*q .Z$#r07^^l O<"0;@h|ՒQ $Z)D T3`=z UFgS׊C04ܲ va){HskYā2r"W4Yv2ZB* U_.zBJ?V'r;-dAOֹ!MzgEa~t`3ƾ1j훐%dzI[d%Lc<*: ƜKYMlo( ԲsTTBֻ8t[J"AwPGh M!B f0AWХ1C;' {Kȳ+ D (N%h01St4C: # sB{Cm6?z`?n׾q7YZaͷeu|8ND~TB$N0iL4éB_@V9uc0T s7hRNTkCaY-.˴R!Eԭkr`N) pr/<|q+q 8Yytݼ7tb{/untnyUGdc(.PC@=Ŵm(~a_^R'+H1;4V]-jOk?hTo J-jw=3"+MRAp(Yop*`VA Km, x{do^p7oل$ =Ɉ! -Nh w_ ^}Y5@V EYx &IC!eBTI.9 c6- Vm:-]Hvw6IA`"8vTR6ѱ%(ԵqS%87RXrjӕ$};X2FNc)S~gl&gq=F?2xXI(Y'$"*?)&1`/2 #FlϨmhCb64~Ne~:r mRqRjr Ih>@vMs0>*??dT0w8%ޗϋXTĥ31ԞV*]$=A[t5T{gچb:++$QruT ti۪:YPHnҥ3] 5x/zug1U|WeÖyiQzPPn@El`xPU3Hwg*ht(-;-"uw}Mnoo~;sTx'S A4:eakş8BZ[KzM'} :p4lߪɢIA]:1&%lc%:j1P6KA:@5hO|MUJgT#:3MUW{SPCZ^ןĕjmPWlzLۜcɩ;(UƝY ^ky]+H=eeoaŤg6Ic0HUA!1iθKu O@^TUNu^)ts@UZDS[Gap5nƞnGLYi9m 硂JV4 Q\ Ǻ-1c+$[;5b ;wzTE\xJ^h{ ZOzue@'s:;hu쥘C @^xud6 (odwvrXvqxlAgi*fǻth7 BИZ$O2ӸZ=ǁ mJk Vt;x.17?wpo7nVF˜տ2 7K`H1)o{pYQSv%Qk9OQPg"sF,>>-ENƕa/B=wW%>Ri4Ac(ƻ.վ0P' "aڦ&vB{P};{(1-)Nù@hZ^\Y,l+[0 %t%-7b]u߀3=^'m<4ɞuu{ۢqǐΞ8$GC5_b'} b8 QFtu.;z111Sm{I[Zxϒ3MH:07^ʤ: Ż/8>fKb1Zr))x/6$t89g|`39z33j:PZ$O7 C)j(`^"nz/`gă.;>R}Ѳԭnr"Zuλ1n⭝ .F2GxP'@UGKgI<8c3 x>*tJLg'n 5'զRVr\nn*&+/Ed(O/:AlN9 ;[Vԡ'`qQlg1㥨x^^7)fIqq.VUne :b!X QLo\h!{& JJh"Q] j ؤoJC`&0ު qPoQܧI%/Wgɒ`-/ sk,?xNл'.VqѪ[\:!FM;,RD{N'`W78ը@G/;f&"J'\cVsγ&;!Nߋuqr?+^\FY-{,%6`VƈPp%5񐪽Ŵnr_-0.if&z n@,yJT G",b/b©& KD;\Voz;rĄ9ɐJ37>!_˗[ٚT-b?):VX ]lM2+؍y xn^VC錹yVK/eHѫbw͊Ma %@$+Ɵ5cdv\p鮾zC1ؿDL1YӍeɤ%xޕn&9s30$fW3e`Bj(GN ݠ k{w5zy4ʬ^dBȗ[񻪪A])fp1V}wXz*>rO-=K2sELCiG0Xu{N&Kax.Tf}SI7T^?ܴ^'rfM~?(>]JH7H$&z7N7-v+kraҏmMr٣0QsSn{IN3K i6[ E[]q!b1]ӜzFȃYK)dHh=Mz<#ab6x Y[O F,;JVRL!khUzbf1"Q]D=Ub GL6;eD$ٙ/E޺y7$$‘smX7" sap';/}+iOdB< 5hҌQ Z 3NHϩRʰ!с@:0rk!#zTNSl0uχm#yA} Α=sd̈́&R2mZ{ܣX@6% 1wqb!Hz Zf3+qEi꣆ 7׼ʅ̢cKzW[9 c ,/?EmRvdyP2FVJO\0$V{J?A%`]:`W,{qPT>co CiVv5iV*#ƜRpqqͿ|Z"GaE5Pdu1-NA)7_5&R۫!ݯ㽯e(hT,淠Ҙ5st3[xhx '.Dc&&c&U+Gp- Ҏ>;id= Z kNuRg&Ln@qߡ7Smwqfp[4'er@ F&mRh4&!=鷱_@j,eN4nd:RVo c w F6Yk,ɖ z?8 ]2KM*%F_"S5I2ˇTv)s5e=UعJ("ǎʟ!9fQnO)R{1Bbt:D.s^omGz!Pݑ@ٳU"/3o/֒u}Eld6.`A`{^t`1ƊN J6eD$Gg1$%@~L8 $[J~ڲK RԈ)h_~Sve Zy[o Rp7܃VNgd_꼥 Mz{JzA<ڡ׭a@"}Z4 Hl+}"J:M#S##ʿX^Ӂ.ڛʔkM!,sy$ećZܫ,zVُCSU=x%ოiqOWiGNrEP/)Xao6ZI(ͯ)2Aqz+ xaiHtOT&b nqIcF'2}qؐ^?N+刺!.IG xNV&arF$DjZwgur'UIUɵ zL YC_-"姷Eܴ;҃]KIs IXa}NoiQvkPUO58jLqVG y;qR0ܺ4X SoӶoYꝥ#1C>˨]C$eۄmऊcIG=cZ"|Rro i2bːLc}x^J f1ypOqjpy -3E,ӆS~+3(9k/,;㬍 XҶ*빤JE;)P)*>f "-n@!qgd\\Xu1,pkiIx"/I7Z)4yA;~;" NR W4.-d9%}UbQE n&&he#لS4ل.eЅ]ovu8L>:Д.gë<'ηI%#'E$lh- m WgJ3l#?Fs8B2RXp;nH@*?W69/]HM^Ff1=WѪϞNZ4G!5 E$u6ڃa/Ǯ$y;*^ܬ.` V,J]i|ʭJs/"'R X6 sH|H@tpx%Rx- o/*_m@ǕggqlB͘%)wxhsR:?| Oj.#vז-9ը~p~s#-{ Թl.;<˺ـV=OvnUKDڐ,$É)5Hy,SGPKL*ɋ59Еh-&&#zu>El+dZOsѰLߔ[@OVtt߁ޚ*ne.(N~VB-v'UR{3QD;Iu ׍ٍz#x(Nh,Lb1l^̀ P~'b!`R{Bw}[ )a ۏEħZ/<+O>'&I Cx3lv+h%|uYhj{ۈޯLs1[p5p5<#ϙ=d5=@cvS $LMA-. `l{ܱp nlXS䓂R_8ER )9L v؇v:,lbJ9d|Ѓy\](g8E<`/|v "`AAtmh"fO#$TFcHqmgim!- m?뭴3vz5\S;^ ܉!f!߲d"C&;Q@!Nzѓ^\~ę7JY9_NYS G(H5\~?+r'8‚PO>=! Itxe0ķ I\Br 8NeƚUZs8Mxzl,5C#ly$$,[tg\V(P> AUXLKVN2kLq#q eΨ4kfO0K;:zu{aĢRL#},_ddD=ty* w>Z۴M0fEW˥78 &~ȶ] 0 ~sA~h U Ik+X51J<ߵhF@s!,='/;7fGM:FD(cK+UT^aA͠NӏKaWM2YW'fWc z] {x圣1OmmPˣ#\-؜ayh;RAƓKTZy5Km4Loyg@gS@yAD[0wDkU35gabx/2 'ׅqcvx)?@J/=@fjz ' hTUGx&{W|;ٕVz@pF:K~A,: 0!~Sw^>W$r!40wXm(whB+q' p~dw]B/$ex dC;A)fpD b% Y{d<#Ioׯ׿8,s( 3hP\F+'1x9Akvѭe_yKҼǓՎ#ф76cKڜ:ǝx EKePlDPv Yn@^zwq@9oNa& 2_ o*4$ψbv/9Mz1'gQ7W]n~ti%( qh,M&Ғ{DW) 쿛HC^M^7n(\ッ@[e@a#М|B}S]a \JIwS7׈yZ X0{9Dsx]@%$lT@I 65Ư.76u {XJ!Ɓ Պcvoȭ]:WtlQlZ zD2Kތv}Nݧ % -JThD\aA#sbMMDEfcn˶F 4Q}^J x2$zs8촠jW0[6v9l,ĥ* qSIHkoD]viW[.ЍE=XNjƹ ^s<Ӽ>ٌb"L7TƗi|^cp- Pٙ]=+#$=+`w;]K p" qqI-DՀ2;>"AMgD/׬.';B- RH 4Xo*^83Mn?8z@x>`c#cL(9MҊr(ߙaHOJaQUP)N+{T=ӸEw )LF_>wal4i~"1͚|ckwWe:5j tKx?EgX%<˟x#=eaݳagM/6˯yPQRwdV'wMU t2{8 ojQNU} ~%,*au<>6_a uq4q;%wOdlfn|я DMO@_Rmq'7)` v绺$LڙbE3DKh\6gn/X =∐ZA#{j&W)qG3V1'g={I0n{ >@X̝9ۅ8^fC)9z4Ǹ`6X& G!rc(nkaj/צq:cRj^ %I-ĺ4^/>9en-+/(X4.0 uֻVꪤvY n/ױqⵋOE0}Q_/nx-0i䫢ϕ,A"gȦMh3(DZSSse%^mWd(Q97fc4gOYy_rҊת"U Hɮ7U)DŊWBs0Ж`U(iӖ !t_! BлGBNFz;Pt ?c) NK?݊!3N&R'=G =((L }PA\[Vb-쪻)x5?r!w_[%^ZbN +T׵=?tX&?NŻnfV~%CQr83<2TE4ΨȚsv%a=P-`t&%l);і:\kYLԕ"qQG(#nuC!xq ƂTaRJƘMȴG1RJsxmaU9z i&Gbyq*8)F n@0ґW-H#Zyí;+6>ƃ{L=W!.Ѽ+fw%X&o8l+^! ~9 e*B_J~LVYZep'Xų6;i ۜdR5)<7l%5m?OB) s2jarOjㅒF9f>%bJ9c^VEVd^bJ5uN y8. 9OqTZ|՟DYP :ګTGhUzÚ-SYDgn&#ʐ@Ӷe:1܈%<G A^v,%_Wq8݂5lx[N3DJY0d{<rhsA>[9gTI/JG_9vm] vLX0dݮÏ"8]! |=WI‚2K%Vjbl[ww0IywB;G&0˴G0`%<ȒF|zcixfuZ򚘖Z$B A  aMxvzR&^q=pAVg!F$b愴 Q- ߄.Ӳ{~,JVYcoن' dAh!mӨ6Pa!rqyCWѾP{vTRB87Bvr%0Gд|`JִEuL6g%Cz#9b v ­پ w.ޢ}HhCyQٽB0آô{$0 T/4s1S0L!~>QWeȸ[<OJZ'̨wagWRLg꽫Lªd2 NusL@cB%U&H꼧i6U /F*/2ckT>o  OPrgi.WИegRE0v|am)\.6&u&lhX@Y'i%_ 34%uf0W)yNF]7fQg _c?|1Fda4kL_[r5"fڕ+Дs?,!)S8[mw9UӶMڧ)@g0n~?ePᄏwV ?s!U11],SY<Ř&~ ~9EEG9j5r5 gS ءz*R&iEgU ~f[ >?aPuL&IZr2&־HQ -~1U6ct#GVPع=ö;KL=1PRڋ_ ۂ S^ ӼcER$MAvD2/P ".:PSmCi;=y".m/#!qQX63: %`wڽI&&Q&[y G;b2sFÜobػg2Qmonڐ1 L̚!#}K憇3Y=Y{s7ڄ\K߄1Φ\ tsEl"Q_+`,mJ2ҧM*2*>-Z w"m10m9^7Ӹ2job^/#C}1驷=߰>9E$*;xF8NКMfKq}.vbt^Raaepk;mWڦ8i `ѩ/#Bi2Tu| Cb׼oB6wqS^ 4bw@,! aM5藸31};Ȍq37j_`قռ. zɎd*09Mx3dC_>e-o?1^3Ź@Bw Ur[E 1m _0^hr%nJtXTqdQn5;k${D^W&L\Xj\#~g=9P$56 ǜ%-Amɚ`-WbE䴻c{U )J[~mtUy*\C ;J.*h=т)x)DnVX5+kg.2,k^J{@rsoG@߲s:!!UY+] TXcvԸwvjr{jctltOVSDGc.ȽJ7E nV:>C I)4F璓,L_ք||+ c+‘6x``/gHVӓ^`:{p:ub =n2rzfACw7Ƶ?=;qgV[Kj{O /qq|0FphjwB)QU>UOuWbC0p˛ =ij}ۉ=fחdHy% G(t43x2&7!Bp.ZBhoPo7X,([;e* v1̈0qGц15mOP0*4mSw{ei}$kWhK8tk dUh|Ըz&$G;#0hl1*_ ' [(aɒEk$}dڀV4/̆13.D+t`aX}o=_wMR?>Y9|J36I5cî +2 b+nA9w܃u lehyb&)!L4NhθOA|= ƶPWq ѭmEi.#?20քC\E8$ܗbkCQ 헣FLpBU%%giһ4,.F2LdƿJU#m?fm/$ k$%&A3:.iQw{l_tזr 4=M!rG&HRdD%%zs"f(a\Ol"UU #pPP,Ao]8.7|ͼ)h' ϊWORFΫ⬚Vx/y+E^!<+4]!?g'VM[ @cն^!^y#;"\-=_ uq'̍}=Lg  *T뷴_IsʬJAL*lX}FvFbCGd=DQJfe5?Rn(33e`W K f#'sh>y`jߙ'X?\xua=s:.4pѽ7ܗ&?'չKL[ sܲ}_-z6HlQ^RضTQU Jy/#ۡ0kdèuDH8Y}]>>ih$Ű08X嬚glt9~&(@O`M@No @D$IBY2@K-dxhITڬV|Wl,P\]aX9FI`f#,#Q0FR"hA{L-geN>RKBGԦbHb k97㙕z~! }wl!䒠M?~,SH|i.![i|r Rl]xay#Z9$׿ GsD9WP`x8FoT;& D$+sؐ(0y0,}7n 爔0wUTOѧb OODdXq3/UB1%jky t>Τ:!x 2ʡAP ؉Pvn^Z"e[YIY*G7vA\=n攡9a3_VCe\3;Q,DΠ1/s'!0x-׼&<WH lJgC8Tڌ:HS 8Q)BC]frD˫r2.]ˇw45#ƅ#˶ gv m r/ʔ-H!X?,~y-x@d)q$Rs%lV 6 ʊ[R'M9h0a%]4a}9VxZSlqX4S>81A`0Bbu,/S?g!0mA-zP@Nsݠ.Ȳg8+ w1jNb4Srzދ9&/gMUd5ʱwyb{wܙ]4hÍȍh@gp2.lomwO8&?oR6h6 %,7F}q5iWvoynO[m*bC`WmT?dz+#eFcVP[Hѣ%o"0WMɬo\_4گI.u{&KEB.j@*2ɯ琊(o½rwWyps^̒2YƔ=q|UR⽚ T[q ѻNj^"%! /~?lUp6a7Ǎ5' uPIJ !l[z/QN'қUg)qu[,gaB 'ÐQQy _sFgWg9nhY38 dsae1QᘆmXȅvO(s8y/]51zݷ(Ì7 lL3n-:&+4z힭02KJH|wStĭD_UI]WkÄm 0&QTmTEĚ18K!yZ ls1ُqEd+&p%(NN1Vpbw$9evKl ŃcӿKRYWqn%%~蝜ZG*=zZ|ZvteDtFp10k}|Uwr B+@uܰj3`]/sSmDmIlpNكKœ|#q[OOFuZ-1wޡ04ِ7{lBOT +mz޺&9nA$O&BB k4o w9 6`N\eb>R=- ka~8-G5tXD>K(W-i$Z[곸!^?T}Cr[ov~*ڛXsjxg\*{8MK,L-mk6GuT |u am3BjufĊ% af' F&}/Y_iAFP`S(5Lr;|XpwSiK&}B2Mߐ%k ~H.cVhr*yII!9kl VG5'9C>+O>[nq"9uJ0~kb#+gK txՊsv^z˄N7@|K1ohe,#W0F֚:ʚ-FHՍ=vwVM-0 $ɜգuMSV!B銾u]gb?꧷><+>'Th<~v-5 [l|[{܃ѣ.Д=A&9 {tOEg q GvK".{)-G/R9#Q,t%P œI$)r)ՊC (3 58\oo+)E%}i37#IL[@ UL ^4YZw 1IzB)BަOF$:fF֘cL[K3Vl,./ݟ~ڹx7ĮN~+M]GqP4\z&b>qH_oP\<-}fd3!kmEI\ЮM J&A+f gV>X#L Ph0`OxE{zPn[DڮY''jLƧL:^qGUrĭaMH9_f6pk"fKt/`m!sܹeJ3.GND']ƞ^ZAyLǀ| QTjGm!ߣwhpp۩(^ c,(E zbQdҗL."1?$Rt@q^ T0y(Ы[ُ;<)U~FפQ߀J?x3AbdV/,4s{|RS&{XɃw2>n ]o^MN֔TcȆ`MW wI779" pM4GUkB]|{ۣW:E|`Աcc>ksc(8JT/40C70 B0~L0,ؠ8Wbc/4pQvٴjDIZ6#`dm+Չ_]oUF)?̎tj3x{eʺ^t×9ö}3\}SUMѤQSSޮ+85[4v si%hǙx@I RN9Di3TevB+UI[O"=%U^rt3Vyn@WM9Ƹ4 ާ{I-#2uf 2CHFy?(;Xab{S@eAѿF[xtXTL·:ׄW7 #$O:,Y~o־g;gmB8fNo]湍e`S |yqrCd{5m<"Ռ I0F[}lX>S0ea-)z1B9#`Ao/Nw]Aшj+J#͙'p?Ѡn0GkxY䠟% 7jf~]\J-Iq%:ʍs|w-J;vьym|Ln~l)6#.锂h9-O5 :, Os|Fu;zKϷt- PË ?T C}P}l7q[lC3|4d{H)+q3Đ^i؍6z/5_8bYOr.Y 43LOJ;JV.td: àgnq ^t G[|!?|VRE._BP6 VteĂ΢(kT43w))eA f7sf Nhce^'SA21fUCai˝Ì'C*_:!ndTx7}]0c~C!{F##GF{൶ &7Y DΊP}^)F:Ѕ xamOJ Q_D]҈OYn|IeŐBE ʛAY!Rέ:zL$TCF.L5?Ua{?,y=[i,.Sh'DK4Hh )cjQeN. 9'tT?!Xڀ*S0Dőr!\V 0.pO8\`z/̇NPCBsX!N8zVXp#gp<IEB";&_6Hzro|߄wʀIoR!pK9N6_:G^Ί9+@(RK6Cۄ'YP'u{o[ L:n`%:2NcP}%:|8}ay#WƾAtȶN(8KIv9 ٚ{ާHc ]_Qs 4L|-OP҃Λb|)T,dg")Owh9$C'W4's! i1zS`{Hu"Eוgyh #mIOlikFOOJ+?s)޴Xgdmkk-(` e%@BvPGǙ?~OQAihUYS}3 GgR-^&lC,4M80V{-t"L^P2TAig$6{3d ̏Fe-+0xHMm'|H0n85{^5P"󊊝-`lBUc+F*MQ'( 7 t}nONߞ_H5\dv T#rwc|Bl)w5@olXiC_ ,ЏHf 0?dWuX3Ýp#~k@r\(cbyZ(ۺthŖq:M+*bWeN1J.`oؒ|DɪȡaF쾦7|2`T/pnd|Rte׹wAVC zp`9Eo ?wMROi 6R=S084yf7%d/ hh%E^ oaPߏۤ|9 DO,u<.3(j]\A1NtT&_F<юi.CWv,ňݽY/]|i}QlUŎPa|ot94͓E {W<?a~g"Γ>2W:UW9V4BGlBZɤ^[|oúWyj&v$ |GpѰ(1yêpEnD'?t39vC¬ǭ.} N`XbݧBf!MPTod3=o*@uy S,|Ek7JGJ=,,VDz,5E^x%;r Y/ۢ6LQ0pȘr3~yW.ZH"lZ5hҎz P5BSr[Eʣ(ч 0B),2hgH[a;+g9HV{\;=ȓo--J)#l `$E®:dzmӢo*LnUM<a [He{18BT.-<%]Rg?Ė <)ȳdR%40~LD5/$|jDCi ȉdy-nNnw޵3`IF/,>PDe{3bdR Xβ6Q>XeM)kO`[G3S'MG Q5t>Oׁ\Tj H2Y/qƣ9MD/}<,;pMk j9/z PK79[Jr'2+s-b8 1e?2DYLS\'T%=ΕdeEƫub k \~O_A7rcYMp_w9cս䗒Wn4]Ӝxo8k V,'(Ẁfp>+wE ]B|WYK5 @\K+b_|TcoXnUNoFOtadn@{(x$v H:ywGJZM;8ᮊΆv0kI`b1@Kڎ]ILyC%5n 1JU(ۀ}c`D~{skp!$iArmA Rȣ2±[GϨu؈`v6[6V(I&`Mv(oX1>g- jC%\<%?IPMxE` )L*72wF.Ӵ6}E.y\;Qn(T#r[̏Y*# իdiӨȝi&Kp=N]:)sA$>K^71^' ׆UwDj2I$o$$V.P%Sݶ?6 6jI;"lDɠ9S [|] x9bh\׌6zYN5#a%DQ@&L'cMz 0/X̑E=|_o0y5?r%W+ݻwҼ7sj ރi{HIjW֯@}%Lûp20~^5cm h3A:8_f)+@UOA.LvwG/NDOt j>r"4z 6:2:^] #;Yܠ !(.;# RLf0S3B}qv-Ik G@m LCՈ*[""n| n2ƑM>x gp(}onbn˓=ggR,3A!HĴD^iowGuI55 {&*1C-[fAWPtQyD ; u'RνN]cvk {r\ Uk¡;2GxFm wرjUvG}h`eX?,qJF~?Do8]$b+hY}A6N왈|OL +tcxdU(ѱOPI,5/P8GEo% lC?8J!Œ1hybDe o Dru[r-v—3a\Thal?h%:3YpɾdMFf`f3DPҕyr; Ilnɜ 쐽xۉZY9Vb?>4ZŘ#rʧw|}folי`uYԡa \[PB-\mch.!JybcWyc(9@ ȃ8!1>Qrdρ1,vI{,aһ:rAT';$VԐ)]-*K(5!hRSs0EؑHu&>]ƌP7åAGeIqyXCv@@ap!~ +ʖgYUݧ񫁨-oB(j) ;qzc9ot4c&ݧ@a>r Q霨!!iz"jX*ؽQr½o0t&0t6R;v{&͑]IfjgK Yri{\7zj<s:a;ݲѕ;:3rX~ԝ`4v^/Lf$~&"Z@F [U\nnJx[uI;1Nɒb^+u([d߇BA8{dÉQ{'9&7n7?Vuz ~I Tjz:;y%%% %űeQI,>,mun|OXm+L@$D_Zt_:Ub.uu] h l+(csѣ*@SB9U8,ra,d8MZ(!G_])|7!,"\xg&FxJvUjIil5@'SZrUTfi֌lw^D $}c]ؒ#v28.PNE%FV~_> <}KDS* YadCۢ<&/^ｆI_'m$ %O1]:d\–d\(tH.CCb_O3KH5mnjrrf~LMu\1B F]9&~Z`{[=;wB {澂ޥCYubXWŮiU [ɼUW%Q#BG헢 s{u9NZQܰȜ۔QeJ_޾BkUzi^H-@TGےI "TfNN,EɒT\ary}}N/w(jV"z%0'.'tı~v Xq fMQl{o :m]Zٳ{NiRo/{s?xU#߄9&-QDLͯԆW:0֜Ă_ ]ʆWS(C7^SVL@vZ `6a'/dzNLE2Y M\(v31bS.brW, g?C/k.9//Ҍ($y{{I=lΗWfLAKfQk_WtVWdz! DZes;Mb^WPsƘ](y݇UY}Bew@`G1>qIswA݅m9 tO4 " $7LTV}QCp\[57݀)é7NʼJQ8xeb7%_ty3 J#qO0K ?d:QStvW/TSg!k~u?`c&( 7 >(Bt9s>pmr*'m`9NH&B6rrh_~x8xqXX 4 մ] DoNάh۵3c*dľkI~Ru!rt2P#GU 1㒥KmZxUwE.4wAwrMtkS!|o]K5]r'Jϔ}߰~'JJtW\%^SK"4R &9ӾĩUGZ^8Ŝr2u <J"bfH!ԣmg&Pad{ԮқJA#/}įjy7bdڥPxO;T+ ?1Fus-F w em'WvÄ`:pPCcKihMch۲m|qASMrDvO,43{ozy)UxKgL{;2d<' 8|zz02MG/`60(nQCqC &.c _;Tͦv4(D*hㅤpL\˭YJmC﵇' 5T W,n0GF}"̄UzѸfu ,=(D'} ՚d{s!݈sMw8*(aԅ5"H>. ?r[/ܯ?;5R%"i:Up X~:A Si9%Ly3**IQ)ocCa3h+W)W^"=FͲQ|Ut1Jx/)Iam3}>L}QO׼*0zW_(ʈNu}G+#Y  &i61'Iq)^K@C㓄JVܙ^J@滶Y,dy=ܞ&=OD\vɌ-Ϝr϶"ˈ$q[X_3= -RTO[y;s:.)@!gm 2Q);RyP9AفK#IRwK5ɓ'uٻq/lCAՂw:8DՑsP!LX $wkC(.Umdtz %x'KQT(Ceb06a#Աnߓ40knX{ChϖtD6A) D?}\? FΠBZv 8XM\dxٗc%tZ?<: F0zRgt Ѯ:+zP6k6./jˈm7 NJP#].˄"YN5fm`W49/e1m`g~IiipN@.׍e eH㝝0)|e24_q y萨gWuylV+!|1K!sz7Eo׭"LM2= }0:d*)eVcYmu_}P8>tx) 浡BS%-_ 9kPu^cnlPM X:~͋Y^wEMU #^v &⽋cS^^JS ɿZ$5$Lߒ*P 68rE\#ؤ1h _րBOصfop5pla;. f*},bR(Z#iN, ~{0aF$Q$9?LeoxJn $JL9s8yjķHhR7knIpD^4<;:-tC~ uoX#ץh 4v= Gڻz\R5&uEU2ޗYvS,:%Et+L{8YtKEcզbXX*,NTϨɫؑmtDƆzAd]TFc0@u8oFQ~4LdCYoW}.ۡc\ !/v]bX֧f zMPٯO!Rf{!N0)B$6NڦkFv׮ dPT)|24DEhXD}Ɲh3f'i!讎fzxY4jD 9"+{g!WKM,0 ;weo=NZ w.]dp٪ x=58tH1}{Ա~"E\1xD6ПXt% t3GD$yҼXoX r *lUm8kﵦNf+SJjl숖s^؈+όo5A,u ҢF2OĘnU)Rԏ\\9ɻW3=E}{H@zfk9eɆ,Gl+i6Fz&weR00:ϫm׏\g2SLB3CGSOvaNDJ"dWbɚ[؛V亀9;y5pzQ6Bľ$' Pl۠*u+^ ([ÀۓYۀEOT8o\Ty90ƙ'Wx#!lw:b2Dkpkãk} ZپiȨlW؎l1vn&Sr{NYFJ HձwFJ3*yÈ"/=7޴1~O_E{Dϔh$F MMaG@dFX6YQڵqC $pZBC+õ,^ # +Xt-qߓcE ְ` 8َ Q18UNy_=Fdg0`mU}996.x3N2t'_Z”.BEVcQU$ԄՃ}4iu'5>#&t#R|LrQR9=m)C 4'UC=jhA*CO;6Z;ޅ#(D}P#kx&pCv20;ycf&-l0۱+)>Kq_6ћ ˜ Ly-DF,N< iK#&p[wvLՅʌZ?9Xvg01Qy8 ;:Q18HΫUV4mҘ-{NWbLQ0TTd~c(DLE|߭_5hZYđCt7sq77ɫFQQ˪CE0= "7dMWҝuX&vSt 4]\[[?WuW`> W~եEY+ ~t92^JPq}8{J~6Inb n" V1}Me?e4 #~@<6p2MS |m)r ۬PdIږ1Fkr̂n75P,gVFHS2k?kc kLO(G{?@y,{@[w0:s6z>49 3#S~R,e6$oJnj"%-'IчmQrHJkeY-Qm䒈\Ց @ljjhm SɮF+%zxCgOȹfA'6BmVzI5ozΦc@I1Tb: G7fOIZ1)ژ :mČi~DžB\)L?4yWZJm,E z| (X/c1"pz^8J 5lSH :k)L09 ~I(9cךEr+ ^.u^_9nn,CMf#!M*w5}@^` ZpUܹ eI3IG[6ߺIj{u0:~gs?.ə2lMUH*<=Onۙ n_xū]%n7 \R#Pf`N-^JA~0s7.F Z#BB:iF=FD.Tfy@QTI>(E$5~ނ9R$ w/hS3S:8Ѧ a֐Y`kd9A$$_(.;"-X*2S̡KL Kf/V`v;.T{j贳l޷ TչV>2>usö%\ej}Dnjʱa 72-(/㬓*>dW V%j_mZq?|MDɔV_UL %L%@zn/h+( 8J ݶ3 RA|LDrş ?<"z0kK*<MZ Ng#]-Io?.6]Z؝T)|{!wNhJB _iȉy>X8~%^/4\7;At;jfY߯Z5yʄXz &󀖦tw_:)e6Y^jxGtQGT{5uo9SE*(AL0*_ݤfmZzqކj ^-}ry由k)>GGv܉&D^a?Ξ$tf-s@8,^mWv<!p¨+\^KK8G؀9iC`#s$ -jNwٜ1$C1`՘-28O+;?i/J.劙+}$KklӶeE6ԮlRÎm!i:$_gF܌N ̒騀\a,@LNO-x YZ#i#'=c:]Jt.3;0O1{+_n&9{ai[1>~|yq,%H9 "6f:iSh^~vU|rY׵*[6˧o%dK\yb{" '"5,&C+g5M-#u0}Y]=C4IɼVkR7ҐbeBQIH򋞉:[oŬl|3(cW^+;nSɭ "V+ VL$Η; Oj :N?5s|eX&d8z)h?K4 e3Z/vǏ w/Mif իDq c| 1j0KGR.# 8;pp( dwYwȡL[asMƤ'KFWT4I(R !8WLW m.%@؞1Q& {9I=:~e@bƫnorWdW1M5.;tAÞ?:<^sR[k(UyrmWDpu#c6rw,8 (!IX t9⦚^~aS99&^K `9i5N[ipK۰E`˿5o"ɗP*P][bjE`خcɰƮ.z Ӎ֓'a "^%uŐ}'ޙ7A}r- ce1HKvRXale}Ÿzw?!i==zI"r'E9褽íDu/SғOUw>?A;/Yҥ|WUELG*}o[iJ:~ӽǁ3!`Gz-!:M'yQ)-WOJ׶04S mB]* ʙma|ͪ%G'zl_гezʩW@oedमBw~da.TmZ07Rjt#JjdK.ŝ|@;3=|tE:S " COF.b7.PfBkr>ޝ}G5} Y:Aߩ٣qjCX\"Luo|NHvG`s2cmaQлWI_a x%݈VQiws2N]bxtD(˨WSP;U c MghsK5g y `{|'LJ|/iWbauE`r6LUqssK}]2iefb h&8d|ΚOhWy*e:8hh Y r]R;A3Y:y˂3x`KӎC s9+3\Ety9Wdj0DXrREz}<_NH6/zק83>76 zrA(ϣBhU D5۪4$a糳#MY;%@/bJl\z'  `Y FLK]$]ǭ+mZ!b6*+-MK5Q. r[7(p]1Pԟez jj70vp*#ۛOgLYjzbCHƊWû78AoAXf47zYG2T )Zȍx2EpS9?JȈ6`;Jr0"ꎻ1] C6Ǖ;!J\曛Y'QG4CV4 jvf*3ˬM< _e{}Ҝ*)0Krl,Se3 g›N14bVJ،yN GQ!z W]MCÃMilưy ^3kAÓ\"{8־7?Zq @*ddT g 0eE e%8#7xl'?hZ:_Z?)4r(צ͜ NYl9 6 ZRشC͎VAʼn[ %Z{&8AP9 k!J\iclNITi⠩(0ۼ!yib^i9^@s_NU,j"IoHhj#0/t< $nWI _I f>F/ ft)lC,OHO#iߦD=$+ ex~>߅"{6jɆwW\K3[9 3zj2`9]^EÔelU HW]!M\:]DX% &n/ pK(6BjS'*1ƚ{Dan04wi-_M͠)qmLv:%+ƒzQ6Xlc{ڃI$p Fɲ{ޙ'X1b mEFh@u cinZtᄞj265:`QS{LndA?eD71su#2䟙fjeXXw%]Yȣ^|7 '6^`v /|#@6ZsN{y|K@H CD>x@C_<+ ! ;G'8hj&&(쪕2G@5_?#B}0i=H)̓l,[f٤H;у*JOqŁ)bI_?!iMsK%>{6x~gc^6yfd iC ;ze?\KZrduA['i1:g:ZKTiq>ąagSZEpED\F흢 F|)h/kh?DC)+u|HY}PÎivv א~'̤%N@T%q(Pycs Q'Yj:HQzF].Dư8iW$|\l`@O͈Yj6BskŁ t ho ʜ:Htemĸ'{8J6eNCx˫KB>,Dtp0؞ɂntF?9GRpu,3:ߙ>26xeK*}ϪAS\7̭1\QV*{@WY헛Ư<ȢSLڤ%k!v'WAh@_ϟ$>v9I O…yL@R钹6M5c^Π {87vK*m[]'3 ²螀,w;}eV3l~w|ؖV_!N7 !QWm{Hs̊ 4i,g]BT)\g'5׻䄞>fBI2bp,jd\}P9u  TLqONN3eeOY#,TRUKs߂Xk lo) izm!l$[}a!sx#+MBD.fB.|. kA2>Ũ!HCs$}vAzB͹-%ltx-ר|of*^IYX4_Jv\5C1rS*h#,(\(;mrQjVhqŀ$rc:x]L)>]2*.3R(BYyzOzsDN mh~` p~Q[2a"THi>F' \bSJk9kAâx,^\~z!HΕ?I3 F1᪣DiYXTַӼf.KdhZ4X"n[\zeéT2upW,H' t`{҃FE|2HLaEzs9EZ ӥ."7tYV쿝?@Yuf[E;2[?=ڲʈ*mHTOPs7|ODڟA9;,H8w0Y榜"D EI~ Ta )Q&Eqr2[ACVr o"6 g3t<v-cpcryw۽֭rcP YZѦcGh8>rv g7?EbE$0CH>rt*2!-z1f@_Y D#9^&i0ܹ_-Bzׂ$G~_1y`橰Ş鞵'b. ֤Ȋ #ѩN!ֽ[!Z9}-EPfPiWmVP oӁ\L-[8y DWDRPJڼhԳJ)0IMp@S Զ ?ͿP ifL,p*^#V*N &%W](7EIV"m: p6P|8& tY|aVxyW3X[|T-)LcWFL,_Yi i"B΃pG3KXfA^Ӹ7?;uh`1B=S:|mu J|= է@Me%{X,ݎB(>TY+L|4"ߖ;'ϔM<.eݱ)c~f-tB[ ʰcr<+xb MtrQP-K&9L\XmKl!BZ"8$}e }} . ]'L>eyŝZsm%0.t)+dcSG)"atxMDv[.gCm ut|TK< }p!k>^?Xm[@k6~(_ǎZf>?!ߊl4u7G0;EɥDw]\[85Z x2tE?ؾMV /뤣?FBI]Զл*Yℨ}s8Qʑ4m?U7M0g3g3T/~גX08>8RB?/fZ r*qeysx~IG?v1*_ ʎ߇@QJg7VlF8U@OdxoE׆MV ( .ʣ&>forExtN/+H6*#D.DTR}FL*mVqP=mw WjLDTNjvV3E~ONNp Oek2ꧣ 2ky<P Cu 5 7p tCݹi>?@ l)XXaq5hd} 4/O#nq]Wz>v#f}B`f6:)pp2\m7 T?`/zt}2Hxfqf9iCvJ{z^a50+0Sx|h L7  JZ~24Ĩ}T³-+phjx_f;̑3h!d$ QR)3WyzlaR(E 1ƕ[Ƹ6o!&?vFz1rⳃ [L rjǿ\zeK|0vroƮm<*5]r~,l  JnE)X'{+ &_Ra"/dش1 ]'U8nj8^ndS1`"wdu1 h DCy(X U?b"GmrL{MТQE'ІiA {9rPN }?m1Ol&p[A0@爭Ƽ[jݹ?([jK"q#@U ^( 1Rr,Cf]AylNz^;|)\2$.cN 0m1$LGҿuisdeȨ-i(4(5y*e"VUh֞拆10"?G!a^T4Go*i@sѶSnp =Uq= i;)x Y V30~?TIC,K.ށ>&-t(1_8'*>n̑0}P{wÃ(+ZثGJ7zʴ$Lfw:s2ZӶ{AD 3z#XR*X  ")B fh`NSAȸ"6QѶ&GjxKeFJ5ss(TN;ul, \rVv)?&[4}}&N`A#<.tLnZ~ˑY3(+Yk^##O%51\u" h'?|}y͆Mɏn?Y9wڵW]xV Ƽsh{0jhk3'uSgD8יJAV&Ya?EҌUPbdIFMz- SD?PI?tW Y{/9݅bc$2zH;B8RYe!IFvzď4͏tֿ n^jDnnga_*͎ʏr>1om€Aʹq0Y$3(4&(=ԳaC03ZY˓đAp{"oJ'kHȰ_^~AV_} bM@f!-$ OL4phdgq1ξДSr0l;4dߣޛ?gt4@w٩ʁT_0rc +SWsA$qʋѳ7Ɇ& y]7SRXw3XԢyiYLVfcrj|Nly_"3U ӭs'$FCY.[u;`NaXIFnd4U!$9sy8B cʯgÐE񹁀*g\PFۂu20//H3Tt:'Y"f{{ZwCHȴ0fPn:mbӌ^:uǁ죨 Іp$1ARJxMTgW!JꈁmR͞+ؑF s{q*QWkrnip޾`byZM߈rU̇Iye[ݲ\ C`(5ЂKo?@'u/pr)MzbS uѿ G>.8SE}Ұa~Qx# [0aEs |;Ky0ƥ mHJyeQ9<;|RR\7bs7_ln]nqsUD68d=@I88;^Hu;+@cKi^I N܉ɳ8wߵ <@* ]Gn? }Ibfykc;=o}hGO-Ӧĭt5SN p5 D7 ܁U5CmhOqM:4 3JhнL[PN9N:b|F3. {¯(luMDok[E;: m/vcUURƕsO~&3ڟ/-mxˢt#pVj~";\!'HGٷCҥ-LM"p ,.N+x}ɖb݂G.zr 5TJce?HCYc_P :Sطsng#1z(/DH8 ";FJe܃bW[bhM..;Pli.k3J8bmd#Z24J0*v6_t=t?cW֞bMQsQ[t0BaObE!w(N%=s<=;xN[Z;%FA^NGc y6u~l9$!KXL'YhV*h NFq޶P Vt9&$5b;^~OҴH+&LnMIho%8o*%LkSYݲTSTќ/fd@œ=9b6[ә(G4IKkFIK)NH~ao-+݇˹ǘt<HB~\BpC6Nȍ[7/9`B}`&h ?"ASM)n x5 M4@kJ}P=o\pKnfA'Շ@[@Z,vHv> <6A Ҷҋ1W%;z{W+&"CyF#q_犲 )2A`agbSq-e- @*-e|wH?#(n=3.=m,뷍ށ I"f{hOxN[4 $$A>0"Zp~>dQ\f~wq_ݧdMHv,2f.{Xec>6gVWkto4$IsD/Kt./s -9%t8-A^ N y$fkE]y>HU1r3Z7Cf?OvE=޳*~@4w][? ,i]},R j,?bT4[d컦;)mN3= 3Rz: 4Ă:~B]UhQ)n[L9Dl3CJ:鱥;\*RBY}m$0]|ƋI~9y+&D=0k(QPmVPkvsIYITUЛنc6;W*#6uuָvwQ!9]FNiEҬ3IQ ;iBۗgr 4~Ջ< Weld=+{|C}3 e.`7Rggl>@꼖]1IDIv[C ⢀eHͫ(N5~mlͽhBՈLٶIe!*Nh+݁ ~3VcDž`R ࣲ4k-˯ grҘ>YT7w;\U: BR迍m_Rd#3ՋCS'oO븺v%n͈?["+Wx{{~xc.RЖk#P{KѮ?~x)=;tq(,N[j^a}99_ִm kKP{j#u/@wK1@5 hT#fu#DUx*VI3d`W'Ń/G"hG}M`U/^*q2Nh(lzN^o,\ʘB1<F'O12 t-# \N01_QC73(sit-{裿krTPhǃ' Wz }-bkxEq6k?,ٱ4nekX>BճlOah3+aBwv0X()%0RM C& 4tuD;l"Q,,a|`_BшjJx릠LrK_ѱ`R*"uИ҆)z%Ƣ ZɃB QĴn[ly(\k֕h!Pل1*+K!?!{$M\mKr:NiVSsfGq!^"O G x+.I[j̅ؠGGx'%\18j)gQT-QA 0st7vNwAˆ7<+ufTvmcK| }(v nL KICd{I OiC|7">8+܉z$v=K탐mЫ+Np%P[2oēzNBy 71U|@m$gsq&{6}QfXVa%ի@ʼج\2.8|%xTog<=*Y7q@3x4Z!վNlL"W}Ig2yAB:c6ZdpP.sE#U6 JQ,ȅV*,魃.~y#0~dةX;qw@z02^:3|DJVh3G1}UCC^8^-v'u/K0igW6kGtѝQb:H,"RX/7JDD'ꑸ `ŞkMrM&G>"Ƿ]xN{([*7J*})щ|C!pXPC6c wOO0 fv5) Q&e63Bksڹ'B&}7"Go4 |ac'JƏ-K<>|YLtutnnn-_Qn?X?%BD{we EpC16)*JC3v\7$@Pmmex n"H^-u5Aז.v fײi~ڜj|hC0 #oz PP NޢzՀui w꺲9S$T@HG(3Wt%Hf`}†LVY^0 H#p6ɌH-xNM=ZmT;踉L߈9-'TG=mwL}:Ī$ihŵq[PW.FfyB(Ӣ>4#-p\|;d+:K!CJѾ:u\ۯ.b>ݦF)UL_V59A#qo<1 s˲x'ϼa3g|[&o,YV' Vy3G慳3P$|oaZT ̯g(}xϸR|"~lOJozzu'3;B_ɸ=bX c 2\.ݸ0G<btͰ% zo1Ϋ^{I *7)g9*o #Y6nvj ES{ƹ˻J@rXCAZi|?.ѕlWM z)4QD[廡~bsYڑDp YQEgG}T| Ew Y X=!sO52{ rg~Jb#yb)̧o%eyQKBTy)a@*RNi-  .ij?(@2H[gM8ƹo2`vji{Jѭ2 $ukE=G5yŨ1>ʇ_ 8̀J3 )r<]K2L&?̦hdDhk&F$7jeq> 9L&EpTGun*v!Un_km127~j"4[w5ƍhw@0H͇p:mHx~~^ڗ8šU9F-Uq$Ƚ*Ӏׇ%dqh:c( t$e1@9ABbj!.f/^y*al,*:s JɾYvϩefB\+ *Y,6mTX/HhָBHQT }/kS}긇y1 TZBD)d/qif"e "TF)uZBV~MCuaO)Y)`e[sEô*} 'S )RU["T(d:ׄgz:8hk 6VMƛwg BߙYOa h&P:D /o+asل2{Po>Ԍ*h("̃UNgڮbSxjr18`//c3$ѭ_8 @dF{\![q߮cy 4u^(gt{\}<3Y #e$豙:|Qiw]\"*GDQ*Muv) ߛZ Vg ~JgQJqu1W :Zi3FνEiFѺ]쩫ڴS6xpwS{}rHvLaZYgʃ2X팼d0n%A uߪdnЉvarr8#RGh.f?`}= fq`{W9dZ.v/wCدaPÿϹ)'`'T2K;Ä8ּFUbtQ7L !y[-ΚM#j9k\fyӅ"F<ʃsM_p~&l)j'r0{#GVGe,R7/&9^%I}J|h1v[%zzG@PQJU&OH ]|ƼWowHh{Љ1ʢ=:%$ٵiMXzu:1T%8Wa* :aV]tD9v{ob"P5G>Ŷl!C`LV/9na2F2( 8psg6LZ{Zz"f]YxFCjґ\{l!/Ry uﴈڰ. ~n9 7j2\Ú^8~gc{~Ơ ɋ}>oWDXXL;Y9)+%9wgo VVpN3P!߀zӳbWStL[aHF< GuVrN0yi]?E,V'/NٽVă$HδZ٦CAe9] _fVVjpg~Ǽ &{ %ډKPԟGVOQ2beqSޒwi֗JIphk;ovk,dq;xxJ-sGSں{bIujq7r'fqEɦ&O)9hlĠ~|ڱrv;HJ.ƚrAĴ=Xtq$lR~]8SV\_9̜w{xW;x'* 54Xg{oO]IhO:{9`1Sp:"e,ٲI2K3ckNTo5\PA ӇO;{21Y<ۼ)I)4 EB=1`rkWF}".B_qdW1 zLIF- /gJ6Ekޥ!~%wbeyl `IΦ82܄H 34=瑑(t>9d~#Y"+Xߚ;"iԬ$ۣ@{^o"9g2hd'k+36-pRZD.h7&-6)}ҥ)vI|ʅC{nxme!֞->]`qQ.moVx(w8ԆhBҠ cC}EO *c4o+( S~ОtKWE椪`dXTnwGz_27@3&X%'1}7&9v24LўRsd"8{3S!IՒ"8m;)9U.D,"x&K=cˍv () ~sHk8c8y ;nD+O8Z3 U^A0I 'đ| GS"o&Cs,ME/}/LY m-56qNO\{ #M2~mV+w"P<Y5 !-4&DJߺ:Dzշɤ7kچj.H?n%sTȃ$;i {C5`ZBM4Z[u? ; 26}i^yY܀ڇJ3Yr#=U~FRAѶ gLD~v+q##/paKK|B$JMB:bO)3)O# oXb$IK)v<{N?Q7*0^|r ʥZ;qԗb}WX-eP1AãAw.; B pwD 2Yt7ի" cgb=|,( JT!1|]uhU[ {nWWew"^ ;O i#WL-(\t Կ G˔ Zc _K]u"2Sm=|̰X#BLЎ8[ohtzA#{Q>v1o>e0)YoiG(P|ޒwLw/MnmYWy$dNKE/(7וŠhZbԿwʄt_KHB׾ѶYbzE8_CA+ѮcMx>}$lH 3ECI.)jdU>,wy7m8bˇ@+{&uEC,M![vn$Q7i",Q9:zgE-'̸g\_.܍IBl\*@q;!`茜^)'8,:X/x>|s1l>D/ ;m_3)Ёu)ݧD wO1%7J(j0Jj4 kLZ -NO}TylFig,v"4N~]{vzӱ|X$3$Scɪߕ7b̀7׭>l]PVn.Rsb Uڈ&/8U2&Q Z)9WSmtgq6R I~A0f\ U20e}ܔ\zw1]_ZڒjHkuPs̽6 !qehL,6l8H&M,TrLĹ_Z*]RTvLR{&c_Iq8| vMIKgMrTza"5\ %+wp "#92GK9PAȬ7 s&D2tw,~1nrӝiꝞSyls}1=!oM=tr&6;f\ t"ѼgyF&te&5bxx& tchdDQ4F"On'ZbD)=9(*tyBH`u?ichWv!4J8bBVRL囪+ߠ$qP<,=:Qoq'?^-qrR%/`: 38-Hpçfn%3fT$\̛|ūơAM l Ab86 RPRC?BPҊvn ~t[}A >^b윌VDVᙟ]m85 AdY k44@YW[d$Ӈjr;Y`L=bҐ^`[Of{:ki s)On4Aw|YE @ʣ4 Pzs=P/lc0$5k// |2w& O6 m1E"f h?:W O*wav@: ȡ0jj5_*v*Ϭ2cRKE I74&ɑR#hQʬ∘E>g˜JFBKNpnR/}U tT'AhL嚟[9s/׼~bJ9ԙ̽ O Nr &礗n&] ;4D dg0GYWl5:D4G*xFhl&kdn8[ZgZxr:E= .:A1$-e9^&(ܬ)z.Y(9v0QCf&41r{=ʹ" h$ T*<ݟ GG 7V|3ˉ\\W0 c h}6.vTp,3Ty( zHrrZ _ɿ'Bu"{Udho5KRR%6.K3O+f59`fw&'MUNd(8!'S^Ӗzxы{w~-oWRiy8G-fr˨'~zn d}I<1[wGGq7sDIޟ\LjӅf& VPH7lf8'nN{!ּc |ג&(/pEFFbӮnm;.n%*A@㌏Lrg-mHe3"ΐ}U !)GV%H+x6|+G7JmiBԶ/qkKxSu%Nf@HЈ N yYU ۻ۞nk9&ro j& Jv`Zx dJcgᆱw<6uSIJGG8\CV {' XyZ,L^ݲS`K޳)bp%`3雖 06ز6l\Lj H䖧xi>HgLK!Ct 4=Ƥgg# ӟ%~uָů|GFVQ.T^BArO)vUUĔ"䵦1B |ڳ{50>>[0P`qJXh-|43r )sHߣH;ě~Q9@S>P(+^]~w&A}b_M u=9u4*nCq",2D\wi"ب1KJ5X =鋡꫔8+WQ,1f)O*\ P>{z1Otn:|uXIi #\Uxx+T9ܣaw-wucA+4._)PUgRq|K\ۈLLcZiaav(Y~1 2WaJL dBL,٨=e`n'W;VKptc2>ZSq ce) JKi/ܐʋ#\uj1e?E uuˡNk*z'G}gaPJ +|y{ؽdg$PFw^h/6q`jVKUO)T (~>=0QsGdY׀roqFՒ :?-vpӨWItd;svDl•gѪ!ެZ3CX-vZUKs$^x+(0Dm+wNPC8ژ9pŋj4Bـ4WN OvM:}[C5OB,M8R dӨUkqӜ{5!uyuES 6K(:B,ܡt'Gxe$Ȟu1L~ģM Į15zxݝ&`x2l ?@ݱn"y0-'l'Rd} }-i-# %Xz yKNgFsNW=qpW%C'Q ,I fMƟ!8&p$Ր&Oۮ%2N<<am 0Dڟz0QWi(=ٹ@P RjhWXN;Q:qHw%N bvK@+#\wnD]xk{46I'*}UȋxCzkY2fa= #%Hv\9yamqXʎR4:}Y{GջٺVYZ+99 q 9&MP I<ƶq=9y)[|\32`lW0Vi)w͢*4%M7∩_Eàg[>_pߎr@ _be7:imO@ߍHEǶ"`kvE[ ɗql# t=ӝMX "rPd̴K!}7Ǔe'hsPM'Zƍ)DRPcJۊt'v 4;h2NFْ]MϢUZg(|&mbh}\o(P몰!uݙWOq@wK8`%uNXEy_d (W;7.<>Iev laRhe+OŴĶoZ2 bR Dx:"fW#AN̿ y J%qk mbxi:X͚ 'rK r:\!D}U{Tr ,w贫wN~~]A7zA$wu='MBo} U|9ݹ8\ɴc0=!s 쫏j% ?wM[3}̦t~i~]:w c,C7]Q "v(Uyju.0ޤ.A>m8 9ȏ^Iu`aӢؠ i|T9OETȴCA9Hk\z) /!bm'L~DV& Ym#5T6kp8- 'ex!f/^oe`vzlb;$Jq,~il C4+.sh֥=<[2Pc#PhzEƱ"p#^ZX|K]`]qNɦUWɢN&xY^[ `27 BVl`ؘjA|ҋ&nT)2^mD\4)VnKHackL.{!i'$_ď+T fgET5O]w'Y^5'@udDމHCg#r"^Ya'1%-oA%|)*hf=ɛ1Pj$\ BB;svưXLԛiB|Ocerz]6t Y`Pcf1''fxkî0 fKRz W!#ʣU^K.rBCD 7»Mc(ne jIZ# v;.[|_NTMp Tq=]6*D ::4mdi菩s-a$򪡐 :VcT3u+NQigI$gߘ- lTD? Gڽ*O(AR*O8(dH-!ET,M@NUqO,B8Y(| Y\2BJᵤz'!X'kf9F1eMZu`?NǒP#P64_GͬT= C+\#-Y]N>pЙĩSY.uĠo:#Gփ:=7diݴ#VXcHf(oEbY jY rF.i\Ј Ym:PٛmFθtgcsOJrk@Ԍ{ ::\C] _ ൅EŎRW"ue` U+yDaQKUXWx g U4]"\r lzg=H=|C h;PWMqcgN^dĿCӚgLdbQcwr.pTl`Ԑ u нlN3Am֨o 3{X"=j\G]vX|dW5 5@X޹R\9c 8ZvJrVG6>hB7,W(Q &މoblm2ָu0XK`>Ù3ojDىf%e^RY> 2JWTnVW` %EY }9^#&Ъ;la1 ~ >;l ID[Varwç22P{c%hӱi&"/8S^ouo`w>Lga?h^ ?YaX)RG+fE>MpBIb.BCcj^}N6$KJw[IqF6e{WquvX\G&%cҀclZsBdb4LSOZ BXsnb7fG̯ٲQ_L-.<|wtiu㾄RǪ$-:[5r\ShiNkׂ1O\BEߍ-Y3})=gܴme33MPYV:N,q#{QmBΠuAS -2+ޗbY-@S`qXjtYξ U8:# VVi@P2]h6`)kqP5nβ;+3]kRxGbxk**,<}/V#MDKSHȄ94\$KC~#RYɨkS=JMMK =$S m'zM-Ϝ(PT˯;_1Sx`Z ɬskI1ʘCB @yP/o鵪)CXDӒpDYMBZ* H3@dqLBx`ҖĜd~ُܿCԒ? e*pv[V6,t+~x Puduϴd?JA&6#cg| #@_\}r7%.,_) Ij 0$6SK8W5I IÌRī'JB$+f_z )U7p}OytK!'WJ̺6.r^>lt2A8t/7-os,p.M_LqpsS+\CL9јtwɥaSDrؖic#N QKIwv"ķ/sT}I!YaWbGmv >ϫMiucѷ i~kŨY2қӼyir=)|n?꫁Q*o zB+c~#l6c9 HKv\7˲9IW a%޺A6 pZ,2= BųAb!!m]n' ^s{iFx"_c \3@ooJAqsfL9q+cN_ 7cN%Xzgd775-r_N-@bKf j yÖYcwlKNfY#'2,ۅ3Y['9!' :,N,RVmzC[Ȉ@Ȭ_}G6{@P瘿O.y0o3ɗ2Ro%n;K0mJAEi[ȓ݊P)+#9i]Uߤ2^pO-kP-xgY*`Pa6c$O|ɴ?OkiRۚOI[ @cz   -2,|/[~tAQTuTs!2.BK@B ò|V@z%7= I#]c%;eds@2 `OVob5XΝ\^ZY8f%NEDɩR >P| `z(C"@L}X8X<"cfO݃9A\ڛJ~KQ I ~ij7DQw(ߖW3ا0ԴBdȋOgnf+UpKEڄi4|k)wt7"osr`{0yUAC<>SQ`0kzVɴf5d!3\䜄B7RHFuT 4Cwj֨/#"[p3DVy˻- s<Z~ُD0CXj cGYltbobjf:\dWmP4藩yuAmήu/a x鞸pO3Å̓xD}Eys%A21pctjZ3{͌_{=S*Tu6?D[,BCYFD Be6Ţ2M (C2a`3H RS< -BSߌ 2F^Gԓdkq hN!r!FtU3 p-U,,4Kݯ%o:bl:AɾFۅ:>OQ2p_:vku B\h"幝dg%{] t)bf6$ dd|aW7ƚ:yt e6p7bs&yTˣ=fٷS@J])53SLO%˕cÄlOƉ 0Al{?R`בѺNK'uZ6T;yMdۖKтtUD#x+%Ґ؂H9^RZ-T>-vm}g#OiK&\XV3Tלth^~w]Am8Y01LzhIX[8gp(6zʹ vēAy4PK4C~b).x,x8.ˬ ғ>K!泚r'b$hpX'$fa@rGa ?CU> TviH.7ؾT߼$"1MoE(Ӓ<#3!^+#Į'69#W@+2dBV<ais\?{2Wg q[TQN>y=a:0ETkC˔BN(^H~cX(]΅uJ%hEmp|Q ob"عGAE?%%HI_eq2.6z6ZU(㶽!V\(#ĊN|s>?50 @! ;tP_ oR8 *݁ga,C47:rJ AD #cJ_APy2RQA='kNzюL_/2f%-lNz@h"S+~T 0L(s'K2yk]`I;K8ria 2>ݝY_O"ʁ<F5أ%s&F&$udjgCkeW:G2:M^ʯs(*`>=F !8w;|r'V+>f 6Wl:jj]Bf FLVh"v>Oaj~ 7D>^ k84zRJ7gmm6+U\ؙS誉Z#BO6T_";,?la6mrq4FEqm .[}$LL9UmQ"Lc8p ׯBsؽ_D&XTpϳwZzα CXXʭ*\fce!N%} YZ