ipa-server-common-4.9.12-5.module_el8+551+ca600d0e >  HdAv U]e 6YVġf6$6#픞䫞QY6%gȡtq+.-!kҿ:\6D\2۾ H$"R\%n=On7.焵[LA*0`ܤf~-6mϨe-L7͇ F7~Q-> Q,(^)mU&-0 9pnm~7ݩT2Vuy,FK\$A_+땬>{_Z% a:, `;XBG1EQ,w0+^ 8]i#Ps!i@NKcE±աC(XR׶1;5^"no1[HHx'06XKyJ$" HŎvFtҐ">liOwo.KH Ή׃)VՠO{t.Y˔t!ѕI>SlrbڇbAsfc5658bd963d4cf555fed7c7d5282b7d93d66ebd87337b84654fbaf04389bb8b2d3e2ed082ade6dba17abb60cfdd1610bed9cb4130302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb50067306502300eb3ef3ea5078c243c331e83c1e18682871fbadcda63e18b61be30514150f8b2565446559b87dbf99c2dd622747fec39023100f1fa24ab17bb5de56fd76b4db6401b174571a56156374ac122c52d4d17481f8423e5b1ee7e594c6a7d81adfef73afc3a0302047c435bb500673065023037581a6973682873ba569eaa2e905ddea75d1195f4d42e2a6ef3f1941841374f2e366011afd9cdc20f90eb5341910d5e023100f22b1be686a34a9dd78880b6b872ab5b092edf26d8d4c20b822139738df3f4661b4fb3e2e0bdb77f8348068ea117f8dc0302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb5006630640230649743bf9dc6483aa2957115854db8e30f36812e10aed622c2b104ab8dd1def2e5e9cdfcbe1446dd56cdc8ea19f8449c0230195f0ac95e3970e081d4ce2750219b9897602b161372bd623cd34271325a10b3015abf188b8b89c7e6cd3a23e040fe7a0302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500673065023037c8d9aeb7206c45267d2b671635c3288baf2f6eba35cb50e0f4e5efa1c57388bd47d88ac2cdc0b9ea3512923e3a200402310081a4b48dd00e638b6520d67356bb9f144e1c1a737878716e9c8a782542fd0e3f3f605c9b92f6ab7cb90510dd88edb0ab0302047c435bb500673065023100daa2cdc7105bbe5bbab83f2d3ad0e35a2e6a71fe925e51eb14c93c85e2bc2d1f66ad2d9fc07e59d909c48d649016e42702301a228cdab8bde9af8bd1e1df0317a89d5063e91b0a2cf1ba03fa0f6bbb24bb6678ac5b8b4b7d4d324d5bec6af202c1d70302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb50067306502303c6b1c71bdcb5b30705477a00118ed125b4ec033e6fd32fece880507613b85adbdae908bc15dabbcf3e30ebccba75e7f023100ffae0d7acdb415bf8a4b6e7313fcc4c4c1d490966238060157197a080d871af3b05729f921145e0defdd28e7d84bd1a30302047c435bb5006730650231009a16585972e670f0f6dffdf4ca7c7081e321893dc9ec693eb634689ed74c5d65dbdeeca94bb4bd35c3f45445adc84ff1023050b371855684c05b914f834a1f8329e664436c1e85584bfd427e1579f76384ef83a7744da4b359b51e75e5414e800f130302047c435bb500673065023100b295a5e03febc36e2cda3f411f268e0e196ce36b25170814cfd94be924d4732d91b30be7b70d2cd0c65a80de173a2ecd02303c2ea574c632b526d6793bbaa6f2773dcd9c1a08884204dbb8c4dae1febd546d297b3fa5f537e67376afe7b4e9f838170302047c435bb50066306402301c964a67e1fb1ec6cc5b45d2215aa6291eab1379a065bf97079308dda8946c3c0cb1a2e0fbe6d0df2c2070e2e502d38302301a00d8b25b0dc703acb7e3b61879f155c41bc81982243b022b247e9c5242827fb2e038e684474f5940a1658474fd75250302047c435bb5006730650230015de0743c5014e68d8cc008dd28bbf021eb6f3240cf3f3ebf8753d3817f5534ae4c2962f194195dd0f1e102bba3ecfb023100ddb82cec60bb46673080ca0f18d4bd6a5e44e93ce037cab8b3800d5be01abc3a35e60d1323fd998b1e4691fcb6c2db350302047c435bb500683066023100ae1ab4f7fda657cea09f8894b3e668da9ef6a31f3d30e4f9381456d830b0f3de60b2972bcdea33bcf135908f92a6111c023100f19f4dac0724a8094675609075b2db554968b80a5e47c941158986514645fd01ed9cbf7631c6c074d9f91d32fb6795880302047c435bb5006630640230634bb9a3395982e0d26e0cd4dc7bbb31d9ab5c5a153e90267380bcfa448e200f29b928de450ec526de78d1e78adb89020230248899ecfe2a64c736c1e233b3f747d072b558a38e22907ac023a14e19b42d48cc1fe21af0d35de255d7b05f31a8d9150302047c435bb50066306402300264e001f71d295be3f4877aea4baab0e76f10bd9ed5aa9e2a86ffedf36b41b79b06d1a5aff04fdb99a72ed1ee9d4d92023002a61e1f06b169e7e88555a04640de2d9f692eda6f85e3e578927dcd07044c4fc78a657df16aa6f36659b7a3101139fe0302047c435bb50067306502300afefbbe5d7eceb9fb6a0895e0b54dbf54ac0d53d6de9deb4627a791b2071d72ab7b7a7ca06f1edd53956ffe723e19bd023100f4ca3acbf6d997d647e2ac513c8f5c04f4ef0e00215ce9a6d45341ff1669b3b31abad5ba43f3c82dc24c55ef6983ba870302047c435bb500673065023100fc76545956d518b5949d975522e1b5622b4f30290e7efb86452103dbdafb8ab946d37c6fc0ddf443d1b1df6e41f0e08102300829147dc44e4f9acfd0b0133d23ac79c512e4b4f4effc8716780d068fe35c2301e57f6660ad979df2e48cacf216b4c10302047c435bb500673065023100991dabb9dcdf762517aee18abac689e4d47bd0d5e1573827e662aa40f08ee0d8c8d386ee22e90868638b9ba56bd1228b02306aa33e360c7962d7bc23c7f5146f6b86fdb86fc7973007407ac15f3986d9b9c1d1185ddd882a3231370dc1b0ef0d184d0302047c435bb500673065023100b2a07b150d64739357e92e8fad1dd93c9558b5efba421878499e8c3212306900863289fc925d17bc33106e83ac8af48402303a40de894435ef74172413ef51a7a88e65c9ba65ee3b043ff45f95558b3dbba8a61d8e0523f65179151e411b6f10cd730302047c435bb5006630640230481a492ded1817be0d995b23ea347bb3e5a5073c025be5ce850a8c17072912633747f534102ede0c9f00fc34fa91880702300d26d1e837e3d0db7f6a606a005833181338cc6aaa194a31513c5b3ed835d040c75a35d8d85bda1f19607233263df4990302047c435bb5006730650230067310559e69d0b82ae660c09b3ce0a4bb8d0ba6471ba8b12592830bf54bef2fe57139213e23bbdcbc5d52bb5cb0285f023100d52cdf7721354dd09462a1631689273adf14ae9b2de6a6768f558cca1413c36f0f86885a447d1d95f08ff434f1fddf7a0302047c435bb50067306502300b4aa2800392aeddc897b98fb465895393cd8a8103fc5cca549d5f2d39215553a71b03b95bc5e01d6759a2c0d6046bca023100ec0e5398c7e06ddc3fbc0db1b95b27564ca70132c527546c66a6a0233b4031e86908a28a8a22c21d11687ff19f1f21ae0302047c435bb50066306402302c86df544d481871bb67aa9d84bf73034560074a10c57e4238b8d6652e924c96cde52baa20145c9c46f3f6b5ce95b886023053b5c479805ead7720b1c9535c1934318e64208df06e7d8f246e2ed75a5633f4214f7b5ec38c656910e23a5395babc840302047c435bb500673065023100b18be6d7788626aec0cd7aa27fb1d77eb90f8161f3166d7687cfed216018c44deb4c4213c3baf2cfe1feeb1fc561affb02300fd1753ff71a7cbe50a3049b042ee47005b9208a59031d2476a849054af09d2d7ec04a504f0c298f739edab56b05085c0302047c435bb5006630640230768692a5cf339494f243949b96d06268881453b4611d1cfea7bec8693676d1d7c5baa3bae6949eb9ba2a5a77c039be6202301ab029426b97a92ac3f56ade9294cf93a617688f19aca93f89a5701bd8fcd02c0a70397397305d4b1edc83ebceca6e330302047c435bb5006730650230350bde2299548618c31255d11614fca159fa6ef78b325af98d4131c4c3671783627839ef5ec00bdccf9a8f21a2dbf896023100b6ddb46d6c82f7b508d794b8d2aae208989f7290e924e6619e31c4d5c52be8734f60addf9aaf5fac255a991674ecfea50302047c435bb500663064023037c0b3c6f80873f3d9b96ae7ac76951e669bcf953653d301be9b2afca0618b3968b82111bce67e19b84b6be7c4e476da02304d78c99502e56a1fae07fe6f989fbeb8b94bc4faf86369e80624fc0e05f4f2421584f44e48db98566e5a8e9288c4eb500302047c435bb500673065023100f1b2d4d5ae0f83992df38ccda96aa68b161acb6353a606fef0aa5ae642c0e1ee9da57d5d2c6a739691ff5345af802f9002303aa779718c9596649973e334338d3a8860d277d57e5d30bbbf5231cc1d11c6ccad8fea5f8a1a68fa32460bb15e3f5f210302047c435bb500663064023048af6b38148603599eca111062ed4bb70d7ac42fa675d6387bf32a3fc2d6fa578e2e0b39da262fe84097806bf87567fa02301788625808b9ae2e33af6019469d0ea6910f2becdc8f6c041f37f38c1e734deaeddbed3d0d26b423082baf0553c651880302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500673065023100a3fdb31fb099a59c3887477f025efd372ba9438d7d749fb5eb57b650a8ae5ea9fb9fae936f584fe3dec278dc12c3c6ff023036558ba92dbcc12bddd3f1eb78ddc0cf2f1087154abbdbc7d25bfa672a25946c01324b5529a1e7639356f1a61e5563dd0302047c435bb500663064023008493c8ef4ba3c17ea80a4f3e282990d9be2b01af21886c7cbabbdbbe0671e0bf07e2a81849f87a6968ebed91996747a02305ec2c27677897ffa8c6491a685a8e9dd5a30c1e88eb89ec11027ea06646fd812926ea0dfac97a91339fa8d1c34c575210302047c435bb500663064023023be99e6f64ebacbc6bbc05bffdafa794d69fe33dae2ce70259df1a477fd7cdf2703bf660697365ec3ef36f19faca57c023045d6e8dfaf3878d71b31ac0434b251130e3de44cd24a93e4e800f25681a9cdb308a98e43aeefde45ec4dc179a88f41db0302047c435bb5006830660231009b34b00493b13e5e21fb3f56032aa2750b93f96f3c75a2c179a5f63fecc6ec1efbea7b024402fc8a5bf15843b07880c2023100d90c089f5491b80efec0cee01c28d27aa675cd1feb689c1c4a7caab2ed3261ab09d23f34845e2ff6f8750240c78afc8f0302047c435bb500683066023100a9c66f06fd3c93a2f9fd93a69e429fbf971cf42e5f20f5e87110bfae2fb2db94807b7181cbd333ba5544a7029e1a3186023100a69e862e9760324d1380fbee6c2bb325ea62d99f0a70167e82f07918122ba47d0a66a22d44b703be1ed3e6314ff6b8870302047c435bb500683066023100e102e3a899424e72e426fb367e81bf0ce27eaa3a9c6128d9d6e56ab3b399b26334e529d72b6731d98ec9e0dc9352673d023100bccbbaf3bab161fb2b31b4c7109a3e17eeff3dd3dec0ebd4f2d273f7a17c6528d714d88a3671a4b88c52fbbdd86b52f40302047c435bb50068306602310086db18363b5078d0946944806c6bf203e0fa6ad64c60b609d45b26e0815561192a1c78d7ca161a57fe2a7098574bec91023100c51e1e584d6ba2ca91450ee00412f073edbe991866adfcc49999ac7ba7269ece372efeeb5ad17ba41571e21d18af28c20302047c435bb500683066023100d52723729b0d82197760b8af76b2fec3f2a6f1899356272ff171770e28ac11ff72b651c26b7db17d3363c07427c8e8540231009dad7c984984af96619c43ba73376f7f01601e2371a8772a4ce2d805b967f9675286b0ddb46882e7c5d9c3d5997ea8820302047c435bb5006730650231008739061693f1c23a1198dba69fc07518edf63130171b729034af74ee9a7c0645defea7baa2bd4fd4ff1a09116236322402300b065de825224bc99575695d2f985bc6c666905539f8760fd89f3d84aa6fa13b453c2405276329a7ca17b4fb0b4fb7d40302047c435bb500673065023100f005c3e0c82f7079a45a46ac80d7a2523ec02779fd692b212d513b59ed8cd9395c57d9b087554525a80df65d74dd09350230360fa4d7732c702437169387ca8966480c27742889da4a32471ca1c6b56c5d56c2ef2c47c86c0e19e0051e412011c67b0302047c435bb5006730650230194825e64da2b405c772af75c84524ebe980fb56feccba3c7d14b9478668a7f0ef1ae1df92488b740f37f59701cf0c19023100d9580a2ccdc67b467aa33a326847c96769228568f3d64f24266075c9d2614e68fe5de707b9c410cd8142e071ce25dc1a0302047c435bb50068306602310090fd2283ef42cbbb72e60eb710f95c27825e06d4d8dcaba5df3859d8b7ced0e10a7329e843a8e9917424c63305721c6c02310094b40a792eca4b653478454c7aaa1e65e88a3ad09e7181ede11534be8630c7b40ba129a35d024266b0bd30705fcd93800302047c435bb5006730650230562a3072d89f87dfb14a3706be95bb9df8b308ecfd794459254fad595b27a14103b21184fa14e9d19095c7c92bdcdef8023100dfb6846fd3f33851df837e991b4f6b97fec436056b95be49f43fdd00131fe5e30c7f2520830f21b189fd85cd8190882f0302047c435bb50068306602310083f36b5cb3acb760194c835be6832ff7b828e8a211f50185204ea2477b6f73133c1e86a7e44dd1f7576ef4f485ae6278023100d6551225d918f78d78e31980423a2167667e1412be610edeabea24f2508ac9329d3d42d15e247fde5602ed79d0c543340302047c435bb50067306502305264af49e2ace5e29bb5ac68bac869dc0c18cb6dd738bf83ea8d1dc53479ac284efeff6117d1e0e27c0e5b3abb164b7802310085e83c66e0876af07324187c3f5e00e4190942e1adeffa23ddc48a5eb080b4584c00cd9e2315ad7124e2a5a8c420ab080302047c435bb5006730650230749f349995149cf41564df2ac39ec24dd4a21e0f452bf3c1be4e06ec9eacc45c97b462333aad4ea16795e0a96a419702023100b96bbeb01bcb3179be16f883153a2e33bb4314799c132d8592fac472885f9207bcd134779e02333328232157641462e60302047c435bb50066306402303974a3d28e1465dc24e62227891f9fae224cecc3d717f33c88bd53f7d121a00b7cad6eaef1428311ef7feef233222622023002972e8bcde3d10daf6801156bcdbcb73da2387257bd98149a0797034f6256e7c311c15754e129811aa3765be5a30a2f0302047c435bb500673065023100f9790a56eb66a5c1d7b48cb8bb2320dd20a7908e8d1064b55b81a49bd2e395a577b1d81b18ccc23b4ba56d7e53d11ad5023042de4ecb828e4d9db3c149f70bff9e759a932cfc5f5e304094b0d6fd56e37927f01172fde9b73ea830734e8a0e6f83f30302047c435bb5006830660231009e1eef502a5ff340ed0c17fa62c46f9748fbf23fea51e3c0396db6c95213c337523cabb9327e21e1eb070b7ff63be1c50231009efb1bcb4a231ca8f6a17126f4e2cb96c57722639cd219fa41a79a7f7cb1f1d2cecef6b773dea79f990eadc117559b570302047c435bb5006830660231008eff205cacf38f0f349415d88b094062504da607d7727d364e05acd0602f0010ce0a495b7fb1bada2ecf7d4fe7eb7689023100b367b8291a76d0ec040bd8e1979f9c2517e9a8ec3101c9d6ccb0e6f18dc42c77b83a933d5cb7e614d077a9eef1c224760302047c435bb500673065023100ddeb10252c82dfa411fddbe18a792a9af92fb932cce2c97dcd175836f7ce15afe8763c894c64d1cc87ac24c017c7ff0002306da935628fb21890b1aeec5a5edf9fa48e6f53052f39415508b785a82c683cf5c44f44caa78e8522a8f24af6d60bbe530302047c435bb500683066023100ac01322fcb95a09e05fac0a03034d44f3498fb1b5545dabdc143e1c3b4b66a8030b23a48b426167da43d4aada000640b023100af01a20f4f12f6e6dea4d99e5a023ed37490182b35028526bd3b79cdb9aa5c5a55155002628e40ed45a351b65da27d620302047c435bb500683066023100e29f422a3246e445dd2ed1609af67770969251df347289263e1c6fb666e5d6195e90f7ceda268ea0c62904db7950dbbc023100fd3eb86bd3e523bf7688374f285f3a5d72207b0ec80a3abfa58b41d4c87dc9f5a7a37423e9c05798c63b63f5c2e5da7a0302047c435bb50068306602310098ee268a779df8ea18732a921669f708d1b605ec36a5aa45c737c424eba18ae366980384d9e57561e15c4b6d5f7d73ae023100fd66d55030b0c3970dbc67d3fb76a7cb2565fe86791cda62d0591e03063f52b7267f6368407e48eaf70173d487abe1e80302047c435bb500683066023100aec8a923ed64648a54b8a3044a0315e11f21b11f86fba8b6acdb6a65f77c6488b3d59d0baeab043466b86f50430c9778023100b33699370502ed7d77798775b86e94e7a262ba6771572aae7ce97a8ae66dc4cbfda2d513e8f58b7a87a8dfb7f1584cfe0302047c435bb500673065023100f734bf9a3a622bcf0eb8d4567b033130a70bcd57a7941d77dfd6d30f1cea32c32f91765afa70ad1ca5dfb4426dcffb5b02306c05eb78ab4c362710800959d565562e8237029fc7df124d54dcbe50ff656a878170b280129fce2410e9e8f96e41b1c80302047c435bb50068306602310086cbf4bc1ef9509d84df78d89c4d5a2ea34ba9b8b54300a363bfbaec9dec1b33ce26535dff46704249d37b736d6ecf5f023100eb31508e3dbbb5ad2738b12efc2d591533a6fb856b5268e35cf56a993106a1b27026a93745951d3803ffb701465ce4090302047c435bb500673065023100aea88657837bb252790924ba7653e6361f2664c09d35ea42ed4271018ba849fe7ff3a240ea078248e0a67c6164f69615023037697a410edc6ddb8a3c1793a1bb7807c5cafb4b017922818f4f45cb7cfbf140f917ad7e1cc21210a4ff9f87b71aeca60302047c435bb500663064023036855471f7bad6a9428921db2bf92483e91d716c78f89eff30ec4563dfaee699b274e8df26b4e637deebb50135b3ab8b023066235725afecc4016aec1032e2bf5e7ca490ebcb90560df7e5ebc28a3ad725f28c57b02eb918a4390939bd73f428b8490302047c435bb500673065023018c0507104d975e1c39085758a39aad0941721c123b6da5a6f77ec4ead9b2e443bb579e0abc1567fa3ef3827cc92e4fe023100ecfde4e34de345451b2852404e58f215f5892fa4415e85ecafec810e9bc595fb09552a4cd1ee5d3a5dc41fe2180e9ccb0302047c435bb500683066023100d663a95652397526e410344d8f717d5141c89ebcfb02b8089f5a94842e53c96e473328b2a81da8fcd699b963d3c1a24f023100ac2a14e3d8b4ea3ddde67aec7190b2e8077bb2b6708cc8a9beac14eb7e1224845c0d3ebae1a9b3a750f5960a5b1613d70302047c435bb500683066023100b58f05de7ed03cc52e0b03a54b72564b849f359fae56a57f1b231ad7ddb6c16b5d5de6ae2d2e2f6220f107da89a0e924023100d83ce564d0b925bf53d0a060fdaad256cf1bbede699acbca4a089a018d5d7d6ce9029df0e244ab3eed77e7dd4f6738b40302047c435bb50067306502303d79a39145521879081c9d165a398e390a5b12fdb18fcc3d1f2b400bb405d4adda9662a54bad7586504384ae6f07faf4023100d1777a0034f52ccd7504750dd98a3e87870a9d70ec7fbf4b9ae47d24220b3c7a94c4df4b33640dd2eb8babe507d013da0302047c435bb50068306602310093317332b1353674b4401c6c5341c47874701a6ae1a4f99a58ec28a2886b5c4bbead36095b093e13cd8451ac16becfb4023100e9620c18d1bbd75135ac029613dcc62811a07566e5d3034d03db3143d7e3690272e22f237e379d07ca3f684efa6507040302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500663064023034f566b81e423d29959ea904a36893ed11532a3fed8554c5d0ccb60a7b9ce09e6a1f2e7fa5bcba6084707325fbcd7abc023067bc2e304688de18838793519c9a4b262ef3b31303aa54b117ab060e78dd04b30873d6f461c20f44a10e4c316cbe156a0302047c435bb500683066023100aae105d37c9079c1511c1b06b985affa063ed6e2c9310a36a61d12288cb9058d20f35661970c46e35fe33ba4c6bf4ab60231008e5469901619ade174316c9dbfa0d908bee3c41a1a77d1ad10da7f522fd6e3ef0568197a671ab3a250bbf39b7ffaca1d0302047c435bb500673065023100ac0060a65cbd3cf9da0f9d112969ee21ea038d2faf1a725a82b5ce1ca90c6aa19cd25d14bfc17743261cddf0441846a9023044bb30ce5833cc695f5ac08c629a1384496a1e1eecf5e9edf6c6fd802d545e26709729e50bc38f2e29ce0d1111568e9c0302047c435bb50066306402306bd2a5d14711bee9c03c194881b571231872f927626d05f5ea5e7cf23be4ff24d9f5768fa79d8ce3abc6a99a0359f06a02302a0831e182996dc3100b45f5a852d7da953141c64d58436e551f2d245d603cec8c8db0a47ca8fdce4754825b4233f5da0302047c435bb500663064023078c8194d438d8e7cbac55715ed62558a8258c8fb189462e363f962cb46cedb55cff09eb894b2d638c805723e70e37bfd023030ef8f6b42fb67def022a9e1d02a4245c6be71e078ee586bc6a7622cc8f8bfb9cd8f00ace407637c01f8ef88b8ebf80a0302047c435bb500663064023029ac28ccc92c0c661225dbb41096fbf46573db31cf61dff806aa2eb681388751db40e03f7a36cd5cb7dbd9e314eb9fe302304292b30f42b722ceef68348be097bcbe3b6127a65580290fe635e511f5fd3e22803c6a85ac6f89528ad806fe07c6d69c0302047c435bb5006730650231008033a48a5bc12691adf2ec8b2e44021c9f24dc3c66c383e482860b1986c36a0ecd86cac8f2b41345ad53abec5fc5aa0e02302cbae60ae1c06c5a0dedbdb19cac20663e70772b07c4424faf3d1c061324378beaeb60e3e87af9acb34f1874fd8edb890302047c435bb500673065023100b3549d4184ebbe5e33b4a9d9b127723b9d2beb8ad1de40daac5e14188b135bb93014ab7e9653b64a1665168fc0cf30d402302e457dee8de1124f091837d5e47317fbd13f9da400d2de3223950508a5a885c112ab7fb9dfd2c7291fbfe628dfaa300b0302047c435bb50066306402306e002180c869b7d159691b58dc5a581ad126402a08378ebb6b0f686bc310604e10bc32ff8930fafb1fd18139fd9939f2023040952227e94eb09e22cca8275139a13b685804d4ababe57078258d87de814612efd48e32197550268e6240a3a25cad800302047c435bb50068306602310082a64538390d812a896557e9814bdc869f9ea51e284e22125a62f1b086a14b4baec200d391335e2c8c58fc166af344ef0231008bd52c480ba40100bab47fc3b5bf336daaa314963043a4960e6406b3064fecafb3326188383e9bf07361d3b40f4ee9970302047c435bb500673065023100debf1967e4b4bfed446f90e73e22589c3fbd1b36ee8b42f8d871c8ad144a56bdaba7d994d04fa22212609ab9c254dcc0023009a48f373b05ae84cf71d08667a25417995df8223030e181959ab6844108841ded14e8ff245cf323ee64995022b59fe00302047c435bb500683066023100c33dc38105a4ff6503cd0ab015057480d097bf30da56f1a9cd2f2d67d0b215e95063e0067f8c970c09347d493407b01e023100f328d75faa8e4656e0cea9e9b6bd2ba2f79768a1dd9d10895245cea84e64e938a7c0102ea59d449007548a7c6249df510302047c435bb500673065023100c4682fd484716682bac690602a5c54382dd08314049955f5d34d3437a9175a98f7de4717971a373446f91ff7265506fd023048d8b4d0ecaea65d61a37d75b3b395d2b6668c65d6a8394c42fe9a0f48ff6a0658cda41f2f4e1150cde61f5f2531a5c50302047c435bb500683066023100816008c81f6fce78cf5d4909c08813bc8a522fd281842bb60bbeb33a1807448cd481f235f7fa1ad7694f291dc8a5b88c0231009bacba42df9605dcebbfdc799f23487dd44b028a4d40f59f64ae8fe05cff21ecc435d3fe0f66d8270c95c948983299350302047c435bb5006730650231008cb43195bdb2a18d01bd986375b1e20cb195093d1624e8a5b3f731e9df2ea0d0bacf12b84aa3fa8f93845ee3cc9edf87023069dd14cffe02900e56bba2eec67418a588c7e77e619463c902e329610e5ea2f04d0159b020f42ee9f61be02b255251ba0302047c435bb500673065023100855df103eb90d1d8f05ffa48d190e8c18b95c2a70df106f16d012f6e7afe5eb61bbad23319f963d7367d5b88f2d3cfdb02306b1a7451db09008949d4f815f920265c109610d1cc049430031ca9888e20156debf53cfa4d439017ea588014a5fc6b0b0302047c435bb50066306402302957659c75225dd89f7a3aa0f22fed47d9610d7429c7f7de0516ffc0bc21f0c2a54585a95cae6f4ea3bf2784612a8b750230583292e27901c9df8a29e9db41bf1c035211dc535dfca2b14da875159e57ed96cc13ca281be17b470bbefddf9441c9130302047c435bb500683066023100d87f001d27c96f43c460aed1c9125c3ad4e1c4cdbbb48e82cab328b284477740ca768c9b7d86e4be52182ba42b7becbf0231008257af05523017b8e6522cb0c2fc8774e63f426929649b8be4d127279d5baa13201bd60c9ad56287fe427d3c15f5b2d90302047c435bb500663064023007b8a002d60f163d48188e6434ec74363e15d270f229decb1cbea6c09857c197822ab0d1ae6ecb4f82d66556c7aa4f22023074e0c86e623ab335e0e8cf1d579da09aeef291bd16df86f345ce98b0e566b386af3b8aa1b004a8f045dfda0f8b700ab00302047c435bb500673065023079020c861907f9b4efa55d6333d4260c4075fe5c5ade45c4baf88f02808e08930c462ae1b1268e331f58067a7d2f7f9c023100c9805069bf15d5ec24fbfb3556ec7b4c1cb80fa0cb7b24f885fe582f3a2d5e7911728e164e07fcd5380613f5b54a17200302047c435bb500683066023100daea603a942e02e280d025f8c8f40c06e789a1143a4832e1599bdf1c5f5497be8c59918c880e4e742f03194d1e60c4c602310089e65d59d875b2936de811b33039816e871f11a56e3b365cf32d99eba372a0be6e235b9f91179e60daf36d6d4cc6dcf20302047c435bb500673065023100d2ea2ff31f7fd49e5978fe655ef97a242979950a104e6cfc1622e57172dca6d13b76dd4dfbd74f9c93aeb1cb31740925023028e0adf2e0496787da4813731f642ad9f9647ced6bc9888ce7b0badc5168401bb29c93c09dc982d11d6daf52ec08c2030302047c435bb50067306502304c8a13c817d7112c58f252b36d462ca4cb39bf4d0b673148bab86bbf52457a2fb6f18d4e53d906c0dd970b3707cc76c9023100ffdd2eb4f86406d747d1f746c5f0fa30992389d28b303e99dafd81e4d267187d7916611a4c30ee6f90851952f4c321810302047c435bb50066306402304508786910075380d67764d030fc73d885e0cbd0500fe5a66946efed1636b41328334c4139c3aee7070dde7bee96e3b802301fb95dacc38da3434503a497757285a6b061bf51a43225dfbcaef9a19eeab602c5fba620c0083a4b692e29829c64e5480302047c435bb50067306502307645839aa997090a3983f3ffb8aa07b84f0aac153bdd5d9839dad0ac78232725e31e70d4de1778e081b1ee3e1e77f6c3023100f71ca74f5647e03a90f3eda74dd82fc88e90ebc324ee0ecf627c8fc980b048374bcddde87aadc4717a87813f6d399be90302047c435bb500673065023045b0db91f7d347e82d52ba2cb38a3ef48aa0f2fce990da6c7c7badd1c7a8d6dd24eefb16b9a6150c8d5e00bd1374a24b023100b68f78bf84611c4c9e9d1b042e2e696f2c880ab6909773bf12c8699a8e36561b0926efb07c6f8008857c201998a8d2800302047c435bb500683066023100ef1f3052af9563bb95a5a2509fc5cef09dc08181c4d995402beea2ef62ad4ffc4cdd09a4f662265ffbe6e6b54e65e9ff023100a20428d9954b895812bba6bad72eb4002cb45060b6160f7a927569c2499bed643c4bf58c8783737a9b6cd7c85bed56250302047c435bb500683066023100a74771e629b561b9062c27bc8ee38dd12c1303c87271f0d09ef9024190120517532a1d4362c8cef6845e2c587c6f140d02310088eed76616e5ed0cbc803285c162e899e4d736bda3710c2f01b37701c250366fad8accc836d03c575ce1a58af22a42240302047c435bb500673065023100f24dde74b798468df294d1c20f50670f020fb9ee7400c3bd1f832d971ea5eecc2e59b83942cfe11b678f9008912d935e023039679fd5b5c94c579d9b92805db6e06a130dbd553b2d647b48e07d89d88e90568b0b4c2d07bb001445f8434243f658220302047c435bb5006630640230681bd59861024d9fd55d242f6773f281aedd67e15ba5faadf6bbad10c24e7f2f410db3dee86e273daaf80c970c413b4d02300fe9d89f7ea35af62991f1dde9277bffd9a27a32e429d0fc927dff14dd257845cb66e43d81d355f6433ee9a9f6e405430302047c435bb5006730650230246a8fb7b8a3497baddafaf90f64922705c35556c8b46c162657c5d9f3703006598aebaa119a458de7bfcb449384c14d023100c58ff58bdfeac3f32404ce0e66bb5bdbe21f263f427d2447aa722cfc8563d55257615c9b9743a797f02c22452e5306140302047c435bb500673065023026a63b84bfc842d7fe70c4b417930a97ce5df663b5deec74789b361a5b27c51352c02f08fe64b33e1aca93364aca01cb023100b9f48c1c25461b2908a4a21d1d100085ba8b265f080f51a6e821bcd6991c62942f2fd1904b52e6f79accc2a5e3a8bc3b0302047c435bb500683066023100b039eae09416bad5ac157f737a7eaba55eb9deae6df9e2b438258b159e24f5df316d9d047a275a296376124b5530f3bc023100fd7a88f6621ff4fdcaa8ff050db6d4ed5b1c0a6a910a408b79f57621e19a749c6126883b532173cd98733ea76a2bf4740302047c435bb500683066023100876caac08d1d43b3aac05988a8cf8bb91f9ae5a850bd0c2383297dde69a555a01b95ae2f478832dba2372454e633a3a0023100dfbc023a44cb4085613714bf68f4a3d74710748ca10d253ae99aae5e036e05887139fba43593e663d975bc4420aa25a90302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500673065023100e34a4dddc6f069f592fe9a3179cf75375583362a5c2e91801b1447afe8c8c31bacf4525196f54bdc48971bf1d784b09a023052d690c02ca198bb82aadf4fdc02f70518d3d814e99ae86eff7470197d895874313dd6b170599ef14e7e53a9ac2f73fd0302047c435bb500673065023100c345cb11cb6df403c41239fc7c215064617d07e1cdcd107d0d4c567d2f099eee915c59cfa4d277b8090d4d0ba0de491702306f876c3ad4db0561659625e6d879524eb047b2472f2b413a0d530e7f316ba5bd643152ca11f79f10fa9a3b17c15173770302047c435bb5006630640230718bbf82cdecec96a0fc1e85286bc61f972380d404841384a754aaa72aae7a9bdf08b4f0b580371a2decfe6751498fbb0230028bf41c7e5054f4418ccb6977cad9636a0c2bc1b21e627747bdf3ea97e4bdee36cb8ee0859a979e53ff2656b0f18a750302047c435bb50067306502310096da5c9422de8b965433b362674cddc3d2d48f7a66d73987cff7d065d0ffc856143ce8fbb1fb51e33ff50ed94d1603ac0230008bd2b87b9d128455b19db03ead0a42445de6fb3766653d566f5a1053ac8ca1b0867aad8c8b00f0bdf226a35e82b03e0302047c435bb5006830660231009c04978734e7bf1e185f4d146ec4e700ab9017d9d997964bb32392e175603517f8c951fc9cd8b6c9b7fd0be46644cdf20231009d5ddc90d7c6db202d9c36d7b829292e424afad5116f6c9b17d60ccbd7d024c0c1651a0474aa4ef3ad809d03181101100302047c435bb500683066023100c72640938fad05fa6c1bc7fcb0180d882bad1572b7fc4d1ef58a52a00ed19d855f4d21c02f6f317508cc2af9876b0ef5023100a06f049a60d9541b1521c43c5be53b88b976ada6bd69c5716a51c7d05aeab9e778361df6f4ccdf45583869f7d9b5758d0302047c435bb50066306402307b87af677b6ae172153250e21d221dbc674a1d2d42d745ba1dd199632320f53e3bc291bd495bb7bbfa914949f67820c702302b41a98974afc8fcd335381f7ff24f8de58d268bdb4c0014e927d81ff3822a5e8c6f74eadf37a1644ee232b1d4eff20d0302047c435bb500673065023100cd2363de39978109fea2a80a3f62549ec54e2372101706833e03ca70732373a8d1c52a27ee8f4e075c9b85cb7231fbbf02304623c37bbf71837f560a12163c94155e6ac5557b6a1f942732329313b0318d8afd3fbd5b03614dcceb951e60ef8f2b760302047c435bb50066306402300497b6b9c653887854f9054c20f50aea45a164a5fc7eef96fe0bc5eb35457206e5d5109625d3ec1aef1d79153dbacc92023032b469b2e6c515247a2fd77294d194d25cfb391134612466a6c025c5c10271776794251b8ccd261c6a9bbd2f1a62f95d0302047c435bb500683066023100a3a8bb4ad498870c1e242fcd468c2bda8657a1a6082b7d2836a9afce70c78e80259ed53c9ed94bbb381e0f7aa22dc487023100bfb3bed17458840c576cccc851077d0a687864e298d9aa25895ad60e6afbd0d53908e948654792d1d07ac0ac041b95fc0302047c435bb500673065023021132bb012882cad35537619347e18f2b75291fae67a9b57748f5c70fccc1773566741ba632ff6fa03198c78bcca1c9402310082cd58707be045e2636caadaeba234a038125e92f58a8b9d59ac7cf68a3352fa80359c56613680ce666bcd8ec49780170302047c435bb50066306402304f08abc627f40cbcefdfb318c21e2ebeed89a7597f3c82f3fa70aa74a09fdb3aaea2aead8a3ab36ff38ed3f81aaab23e023019d8244b2ea1c449fa1469abbc3b25d594874ed7ada5e12ac4080c860a1815faf0c2be8842e358b9263500672e3899480302047c435bb500673065023100d8d8a4e5eb4793f62c4c1c0417a91628f877abd053853ab2b79f4d5dff10d9af81bbed5b146aaf8721d5fba604d19cbd02304611fb8444d373784fcc053a62d86f970cac0c28ed559aa7d7a8439a2568c5a59fdc376217878642b045ae585b0200f60302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb50066306402306757e189ddf42b3441cdb1e685e92107b9fb662fb8462b931abf6bfeab503d1f103831f692d8f9ebc025899b312e78130230444dd397f4b971b451b8521bdcd846a898b268b5010f92e412532d52550bed4d0a6c8b07faa5cb3ecd013c62765329640302047c435bb500673065023075015fe95e807e8fc10d47adfceadefaaf040546672e68ababd9792ce23f9d92cd6e22878bd08de869db97e81f1f81a7023100b12934dd65f129325877f809bb76f16c428fbc1833e9a4d4e5ee5f6db902c695a7bda16180f73e11ad5d573bebf68b8b0302047c435bb50066306402306a27834f7f5c60a5d489c5b3b5af3a2cde8c00e160b5139c471f7a9623b37cb618332eec0077eb46883af6912181edf502303c463524fa3726608246967ab18e68b496b43c6bc6880818ac1880746c52c9da479a7e6f77c932afd7b02c15be9d5e480302047c435bb50067306502300b7c680a402e95e9bc71a181ad310d2304afe571dd7a59b161127924cf4dc7b942d1c5826ca72ef97f8ee9fe696bc9e1023100cc335de44da8a873e2b78d12f3847d6bbd5c99afe7483ff9b22b363a4883a06d9e4aefb1d07f6b307799132a3686b96f0302047c435bb500683066023100c036ee76c114ccfd2cb8abd3cccc43ef831dac735f623a7b7d97fab4ad7555a7b0475c7e0851a4b5a824a66cef6172500231009b6ee0b890bc37943ef121a3a2706a67493686db0ead9d036569424c3daa3e7c536c40ee3441ae1465e2a9131ba6012c0302047c435bb5006630640230514afa5a6975c32b6d8c845df6bfe39f4258400428a7a8c1c8e4577d8364ceeba91b2f1a5c538078abadaf7a538041fb023041ae33d2910a3453dec87f20b31dc8822bc508df7e1e34c85fb8c04229b8c00d308993b01085867b71eb69db87a5e6400302047c435bb500673065023029953e2f6f8473533eb06e673fa3732c9aab47ae0127b88dd0f776021487399ec6783f95ae04b414f667b9837ff0e14e023100ff517efa0ea657e5fadce50fdabb7507d4ba146f43938243e21b864a545d31ca6054ff4211d56ee7f62c78e0614edc570302047c435bb500663064023046b7af28575ca694043b50bb326b6437fda18f56f7422c2be12e9e68ff5779afa427c4a15d49e6c1abfd030d0df58b7d02300f1902966c26eb54d905f788522177d163892335e1f3a1f476d263ccde7296aeff3968e3e2df23943a6f941a6d06dd790302047c435bb5006730650231009c5eb8ee33f0551c68392d240a1f4b3498045d692724b597c05f29a8c05dc9c39df69448a64a70bc957aacbc38696bd7023062aa0b45be2fd3268c6fb7a870fe5c8aed9ca2dcd63f51e84bde2dca582ea70c15a2c7444cca97c5094d11cc49fd652c0302047c435bb500663064023054cd1128edbfea8096033b313df11f56e08c8b8eadb620cfccb35f90dcaeae43b45c03344e8944886c678106d7b9cd5302302094fdc2f5c6ec785c04ef1414067cb3361d0bbf0114b9ec27d540d8c7a2d628805ebe411b26731927e86ec6fabd00100302047c435bb500663064023076f8b6ab614b1f405184dbb5a12d054ea65c25f0342037bba08611ad4b1945ced45e161d1caf0b6a297e198fc1260d7402301faea27ba4b0372dc3ea758d5ae7c5240df2c689dd213d24f490856ac7226d96e24c1b7aa45dfe823995427f7dc1522e0302047c435bb5006830660231008dcbe71a3caafd66d1953a2b165e6b78322514ec70d03eeb7461901bc733be1e451ed5bdafa649f05a4cf031de3be5370231008f27812f0378ad2072b55488c597171d5eba53c28ab6d10c903086dad6fe1bc806c93054e3e89d5d1035e7bf0181a5bf0302047c435bb50068306602310098cbc0beb24f69ab4a9a9ce39fd535fa458c340d5aa6b0a589ade598bf258e2455fa61353d3f96cd792276fa28dd116f023100a415591dcdfe6b7e822e6aff9e6e5e777b7909020dd5befddb0fe7913754d7ca397de56590982a727d95ba4aff5e12290302047c435bb50067306502303df9db373559296bcaa4ec2ff1160ae0cdfc62e63d082946281f0c57440faef725c7b3b698f332bf018554b335fa0051023100b709f416cb76c8395a86e94f58424a45cd6c9c60b17305aae2e25e2042948987a848d1c02f9374aa00cdf5b6db0fd06a0302047c435bb50066306402304635e0d97a0ab319d53d0963452eaf281b35714bd83b455e5de304768f64f7ba586b92f60c0cacdd2a8dc3785ace60ae02306db1c044c3a057cafbc44e010c5355293c4c799be235187ac28add225e6256b57d4108f055ad0929ba3b057a90921c810302047c435bb5006630640230601ebb05be213556216f205d044f493f041e5b2814cd6cdd24aec4b814019b0e9cb18486872178242f62baf4ea24f2f5023038312ad77e75c1fa15050164478daf83abee36ff52de143c01e179b947ba1042cc862b8671399abdfab6a603fabaac2f0302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb5006730650230120151b30597d0c97e21ef402e834a1770b679ca08a757c7707816749444117b9846c254645919943a6ddf81ad4beb35023100bcb5df919908c3cb7c7662e70aaf796e3e4fe1834cb50c6646a95447dcfb0ec16f0d5638c6f67d5ac5ab8c837acf39ab0302047c435bb500663064023024bc536fb28b4abb16234e22be25bfb1623f9eca1f8ea299ab6555105eacb935f71a21fa27b0a6dec3a8f285c7b375e10230680a9e91190567490ea1464e39631c64cebff974a13f9e207897b4f656b708d2915c910163158fa043516ffec3a738a80302047c435bb50066306402301181b96b36fbab58abdcf9be309d9f6c6f48770495e36aae1f00fa26b7a42374f9f8fcec57c2fb6dd19f4077efe30d6102300702486166d9a8ed3aab085375c97cacd45d918547092100ba1154cb9f33d1d6699e7c2fd4a3f8ed0e07238f33b43b920302047c435bb500673065023100ddf1922adbf6e3d2d8914fcc284e0a6a9aacb99ad4a0972217aa0668473ee73d0e49e94547ecbf94815282d4535aa8e50230682e19c3b0a33536a830315d60bfbdeafdfef3dffa87bbf1fb40156e6c20f0139eda545c04ba0143a13f4072fc5c12f10302047c435bb50066306402301f13346cd99173cb9d0324e2e2a607b69d6a23de6db4f3fb284b63a5ffb63fd21c81f21b9b7041ee8389abc134068c3e02305b54c297e13f1996aedadade2ec536b389b9cdf49c4a93d4460d4e0e8b95436def1c5677d17cf9f2d92e83f97d190ab30302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500663064023036a2d64fc2614c2e207b7b7c97bfbae082939a4a8fa83255112c8af15e29234b4a6b5f3e186826a762b09725be1f9ab102307b9ae3633546445c644853cd79ff31ed57caabc523fa1c900b79b42cb709cb2a69cf019130d0e63dbacdec299e8fdb340302047c435bb500673065023100a46f47da6f0abacb80562f3612fa672232d496b6b347ace45622b898ccaa35c9a020f754690067e7a387ce1651d58481023073be19eea1aab39f01917656398f4281a5e56a8e3710a9e95b8d4288fe1e033e3a13d3a733a199f6577b7445f3f91d9e0302047c435bb50067306502304f9fe6b0c1310495581843c5a1f1398aca38d015d1e29655a0e720b04a2cf3c7cb7da2f4c9c272b06da7593f5f619017023100e5f356f9e12f977c7c6b158c6649538447fc7c6355425e7b0a85084c1b209f72c7616c1935c23e0be5d22bbc7d99945d0302047c435bb500673065023100dcf6cecd59c1e83c5c252048545ba5a926f3b41dde926fa886f848f4060307bf3546cf3d743188ddbfbbab6845837c98023041d9a1d71a0868ea96d2a41fa43906d28421091087cc052c1a6850e83d5800114ba09e6ca5566951d1fc4c0c062750530302047c435bb5006830660231008fa347d5bcb44b8acac4ab40eadc77856ed7e7e80a331043b779202fa051eaad6bb888555046f54917c5004ba30dd999023100c2474bada7ed6a881c6e4948d12179dfdd885f37f3da9215edb8efb5167a84f93a00b7fb792cb2b79b2cd4bbad6e68100302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb5006630640230399485793222042ff102173a41ae6a7ad8ea70d1368ab3aa670a26166d61e3241424ac61e49ffdef0f0a74235a8f74bb023061f229a6d24a5a95e56120a24af4dd286623c4ae2eb0ddfbc256e135859efffd8422dc46990061e2741bfa540c3b45ba0302047c435bb50067306502304ad64126a372cf6111f0c7ea697ba77490bdc44f5e7cc00a66277ae0245545b14c661071a6a10c807db8ffb15c7a1f01023100ee13491877e2ca51402b2afbe701df3478f869d12273e257d92e83c05989b3cf68469b76196deedd7d1c2ba9407c35170302047c435bb5006730650230662b22f9d7f72b9a02d6e394a66c256cbd6e32be094ab065cd7e97633a53294c1b9dca51a6456d2b1e1be9ceb807f4ef0231009346f2e3b6a1b3603f9617b781066cf6aa9d2eeefb4a5ed8c81d0cc5e3d82db8f775005bf3e48e9c68763b30c7b761bb0302047c435bb5006830660231009209ff7d8e0eed1065a4bdd439193cab23d58a2ffa27f22e3d64d8136a521495df4cfa78834169370cdba93bba669998023100bf654b44d93210d9e4588e985e3459351671c92bb274026376bf9f01e4313cc8ffab190234805f21c74b3882830aa3170302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500673065023100c744190ba1d65a3551d807d3fac9f12962a882d2d9fdd67da82e4b669350cc9c96fbbf54b66c9df0b8c067264cd67d0f023004637586b098b287df4e6ea2eb80aae125cc3520d67c309324fbaaca676c2d870d7de33544d590081b957ba3f6d0e99d0302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500673065023007316a73f2f9618fb425c4f7c92663429dc15f5ca8ddc85624359b5f8bd26f02ac326ae20caaeaf7f37899db86e93ae4023100ac5ef02996cb0a88755d31feb16d4bbc45a713445738f184937552007b4a746d050282de4b44963049e372a9e7e771520302047c435bb500663064023078662482a7e66a2c20478456a98b7856edaef38b5028bcfaa2ebde2c0a6c3663f85ef7b655e8d9b1aa4b70d8fd15ee95023027da6e273c555d183f8676fa38b2587cae4a149369dd574451fc9f22c98062d0160d5fbd355f90ac6ed34c73121f518d0302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb5006730650231008371224e734c0497d8df8bac3a0a95e65408708fa49203dcfc48bb411409dc3c2c6a347f13e81eb9e784f2cf4e24ed20023073d4714b9efc7d8f2306d75bda001060f9e05453d4a80408407b128104fe3fa3cc4024d70d369a9b8f5ab6418fba7ab60302047c435bb50067306502307d0dcb6fe228ad42371c6c1f00f2338c26af395fb56ddb2591ead6ee4cd4641447efc6a2538b1bb3a98a98e893d3e2d3023100af191cdb49af604f6b04adc8b4c1f57de310fe8a5c2f02cae720d6f670469c5fabc756bf4aa7355d6de5b6f968f5cc3a0302047c435bb500673065023100efb418ffd37668a567d4246f0353d2447009f8a3a83a730062abe156aec1437312a464da1d33a27b6b8fa4977a13232b02300f8c409f53deb59b47e7a5bf85c38a0247b099d7b2a3f380abf5a8670c9373c72df1437aa05b56df57988f493a77ecab0302047c435bb500683066023100c4c7dcc8c03f8dd0dc6eec0d3adabb41c3bd6fa8af6e4c71c7b0369a7c5b93b01f4c4919ed64e253545aa44e9c1b30eb0231009a63aeaed9c8c6a22eac56cc5f0d80d8348fd784ac4cbc0df3ca31749e556cbf7d28510904b1ff433a4645a2d055d8740302047c435bb500683066023100cf03f51df0a059850d87407fdaa2823993ca0ccef4940feaf4dd681890a9853392423fba4071d54802ed30a735da19ec0231008e1b600705de258e606e7ac8d2a5a18c834e22e9c3141d23d0773d96e33737ea7f886bcc701a79fcb2f0fc3397fedc5e0302047c435bb500683066023100fc36a745d80a1f323908aea4a6cd624c99b3c82d9f1a16450c6546681c1e8bd2c60fc52b0fca236802d6303e93b3f1bb023100e3d25f502802371912eaa26f9468fbdcc11a4cf7188e5bf647134e8c92542ac6cb98f1f720179ff29debc5e7b614d79d0302047c435bb5006730650230320cd129a3b76906758f7c7339b78713a84ebfb3342b6c4db74a33e10bb375a723d3f188b8d052e5a22f2b871ba4e8e20231009bf1308e94618ff100cf56fcdb8021ca640cf066e5fad50f644cd5c9308c7d76df8f0c1e5ec26a41a56cda6e5cca7f7a0302047c435bb500683066023100ce0d24bbb441dd1b5ce3aeba80cb9b89e23c532b1eb1ccb93dd1505f769ed7dc5cb5c601fbad556e2f9b5aea787a8929023100e6e507fd02dd04f181c5519bacf620c4c10c72fb2e84456c83a77a1c1c2cf5e9d7ad6bdf955cc023e1021a4e454b849b0302047c435bb500683066023100a974a7da1e3cc107b8d87838dc7c3d72290d06576f3ed2c8b31ab0b79c9faee0a115a338ef813dfa485f0b2c85bc73ae0231008e440159c0bf8ea4256a3c2db3e3a4b86ac68b05eed204ddc94eb1b3598622ed6803826adb245d4a0754aacdb59524680302047c435bb50066306402306f4bbf76cb41b1ecc5f775ec110a6f2dc9ea26d7c36f8f12b8fd8372274db53b0bcf3db6b0ab259f7df39dfc914469e102306099bbdfd7c7f5d1a17b7e362e9c1a8bf1a6d35a6a0478102788e884a18513a780925524ed7f061945aeaafc956b979e0302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb50066306402307488c63eb232adb434ade3d24b660d7deb181889b9ba1121929c53cfaa13147b94305cab610d7ce1c1ada28e216e77d902305c8e78b4fbdeeea06d17e5750156fb8a2f854104a29f5d37da462adf52d99c2afe52aaafe04eb950e05ef16f53dd8eb90302047c435bb500673065023100a39fcec1ae7f1762264423cb406b4c2b5c94b0f0570b75609ca63abfa74d7199319e91ee8e9f8007fd4e2540a3ef166c02304ac89d915fe636dbc1101501011dcfaa47a117178eedce4532056f7455c1c428fb7861be4b22db68091dcdaf0bde6d340302047c435bb50068306602310094982f5e1ce2b4b2f127f395a70632dac61ed91f3fac6da3132747095da0470aab8a2a1ec558bde9464e8afb9fe55d800231009a90ceb6ced6c9a78bc9fce6070fa3fb29e8f81641c554888fe488bb64b3e8b8869d0534a69a749d6491a070b078469c0302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb50067306502301f7e8803cc760d6643fbc378f77a2027abb2811499107ac2123f584e915f602a0c8ed08c0587724153c785a3339e7b94023100b0d528a5bfd7a31f8c4a3562ccbe2aed0bbf6b73a7ff21c38c84c9fea1379e05c7da85cd4888028efe7f537ccfc90f770302047c435bb500663064023060d8040773cf5b9c5516dfec926d83b6756da20907a47f5ed08f0187b4e8142d0b90ffc8d266173e638770ac7dd8c5c802306790176dcb6ec805ec9559f0e3e77a47d1a9587692bb422d7c6508c6dc035725912514d2d79ed77404a51ce37ae73c8e0302047c435bb5006630640230274406dc1da3d1624c80e05ebb04da8b57e197bdba92fb613c46ecd9399b43a4abfcda41a66404f7983623b92800eeac02307214b215586729b0b4d0dda30cb4048f5fa421a2236dd0954032afef289599e20f1e2af43a7b5b6d2f1f62a994217fbc0302047c435bb50067306502303dcd85e61896433ddedaea79ffd30382bc55e68980d96cef272bb1653bf98140dc3fa543aa62aae7f99af6d78d8035f2023100ffe8ef548d28b87a060f7d07b9f18cc2e59a2b906cb8a467e0e9a450062cad633600e9619a34bb8a60e4ac9f6be6f33e0302047c435bb500683066023100cc8db70b5d9d722f1b98eef7483c659575c575a3a731dafff6c41ba722d54fc46c2c0eb085c3b532b567cc0040bd8705023100835613851dbb9d70384ba562b6997105eafaa58c6e4c6ba3b5112983b1825726ef060716d74c73726fcf6b815fcb0cf30302047c435bb500673065023100a837784f0afa143dcf4ae33677440b41ff462486c059d10907b4fe40db9a337209599fd12930b23b5b38b67af02c0b2202302f64665b8ddf2ac7d5dbe98bfe81226727f7ec169426ff6af50f0fdee72c577014aca9a41fe263eeac939bf9d958c4bb0302047c435bb500673065023006f7c8e8c4391bee340e6989fc281a078e9ab66bee71d6770a9f828f77c9335d34fb497913c815d3a21a502141d5d61d023100bb7a9c4e4154d98c2ff0bd7d27e87f0d144634d96a90e71d6857de31fd0981d82f549b76231019b5d52fdd15304b27bf0302047c435bb50067306502305ae461d423e1f7a97c3b0e6da1a3052d2e74642747e49e5a8e66efc70307b86f0c0a9d8b2adf1a7c5069646d8a726b8d023100a7bdd986a4294d3ab267c3102f40656eb48f03d88ac6435af749e0c5b386eaa8a4ca282e4633aeda8d9e510e6ab9fa350302047c435bb500673065023100ee27bf0ca97a25adc679078fa450e46913f66fe722e63496ae1ede051ea0ebf5528fb00a17835c5552a9f092746efe6f02306ce32c86a7d257ebaec79af09ae3900dc709954144a6a989783b5b7035b8add886c78a4adcbb16cc543cf6b5c63097aa0302047c435bb50067306502310094b5b0a64661f2f998230ad1c48d49a26a38d55ab26e818a800b63edd98006a32478ea04b636ef25ac9a53d2f0da4d2602302359ee00fce715bd663845df782646cdac0ff37db2facfee2dbc114e316b76bb02384c11f99d99ed7a2b2c315fb18f160302047c435bb500673065023100e9e5f31d26c1ca9fffb7f2c92f1a20313e588c2a1583d594ca249362c9bb9acbc04503a80d34819c33ebc318d95265b002306f9b3c4ecf6b460c6533743ef569401e52899fcb6754c467b677c68fd537c2686b119137f0cf690cd3e1c6a943a74b560302047c435bb500683066023100a2c2a7806f98874b55c00c94424532296ed958cb7859ea97fe8e0a5051e5bd2bccbff675d21f2cb47132deffb360010e0231009ebada5bae41d874cbfd982edcd94bceb7308ef82ee3620008c44b6343ff55a203d50b002ccada3d7278781c2610a2af0302047c435bb500673065023100b886ad1d894634323bda0697339d77680cfec9709d6b247eeb80506028cb520e9405b56de76fbcaa5e01922223bad13f0230748e4284482dccff9f071ab7e4c03f224f92d0cccd5bfb411bb39e2ebedf2a4d5b80b1bfb995ae5bc5e8029b58ce71b40302047c435bb500673065023100b30ac3f2627a7dce97b56254e705b1a917dd04070ca2430da1d73312f9180565dbf4fa6b6a5a68a6249471e3619268230230486ab6bb502ac0c290a9308456efc9a4b9d920767e3cab3b2e9fc658bd19eba45964c31d58869c53b5f6eafad004880e0302047c435bb500673065023069889662bad7f03a6583963f2fc60a526294d9bca0b320c8be8f643837b5c66413c760357064bb196104de5178475fdd0231009d2e539918f6322b0e307ec173fab9b1f78b42078d8b2a2ccfbba49a972099aac4002b6e249632e4984bc3818a94981a0302047c435bb500683066023100a034d41091bcaa7ec410cbd45d154157fda5083671cdb775f9fd4e3f21540f69d2e1dc1dda34ae60589f8722e7604c80023100cb483a8f3a393354f8a2555523888fc0a1cc3978a4a85cece98a09c38b4c1f868b9929e6ccdc7b36140a7d62fe16dd300302047c435bb50066306402303fd693ac4e9b0cc881ca378833a93f759e9e5762436510ea5d989ee892f149391c8a22088a0ed7bb71de12ca96b34a0f02307ea0cee250546aa4bb9174e21a9164c97e237c4ffdf1ecc2b9c086675cd07bea8152271db2344149a44af97df0daca170302047c435bb50066306402304bf70353c3939fcbb7ea3539022a2e86e4fe8f4d156f503708d0ac63bd64c6b61055af565fb9a21a904ee3917065ca4602307df245c04ed6723147c81334a69c735ffb54dcbebf404e79fd17c70a4741f1ba5987abca4280d8e79db24e78d277faf50302047c435bb500663064023028fea7ae655e6d20cf319e6d1e861ee351de51d91a30a7f17c4b3ef4ac20cfb93e54d22ceebc4ba29c76048945f4566a02305eaa16991aa77a973cb95337ffcd5a2bead58b3d2a15dd0c226844b95bdaee85f87c5957196eb8bf44f46513101780c00302047c435bb500673065023100cea21c97ee8122ffe3f0cf6e3e9dc5f1be7b0626fd796181978f816e3120a700a5b14decda019bdf858f8630aaac8adc023036d8b6bdd63dc472fd09830bbb132ae0e9cc076e117a8c249bcab01fe863a18b57a934e97c4d469e5ee40994bb5fab2d0302047c435bb50067306502307b1d4776548c1dc40d3f61115ff6458259c7d1d3295a23b8824a370ae0c7c77efd19bd7f7269247cb7f7a96a48b77259023100951f52da9cea41315910e12d715bd0ddc9294331fc96a0053a85b95bae4f41ce750596f08e18ec469b908716a7fd42450302047c435bb500663064023065475649386c2219ea95e2f7e55311d889b24eb3d3014ecf8ac9b79749a82e818bd6dad8592ebed35ec5c690362c051a023017d598f5d9f07fd662b17ed897c73e90d2249eabd1ff5d0291129e55b46119748b411d1bbff990bc8644a56904fbaa760302047c435bb500683066023100ff7bdaf0f57a7a58971ae93084696d30c91bee4ffcc94ed88704a6c3d21b8f42bc78594195116aa3dce42274e3e6f9b4023100af936a23f83422770b468c6f305a2413f9517b17cbc7fe16e2a1a20d639fb087601bc54e509e6159ed044777e66e85690302047c435bb500673065023100a35a48809054ac41aeecee6a97d02d8228b2bf861c2cb732754fb910fdc0370ccca9c99354411e2b2c4b79f8d6abe445023065da5e19b0656d351d31088327e28c20836d6d5cb8a93054fc80c820df4285c50a381d4eac38c2abcbda65732b08a1f60302047c435bb50066306402304f205ee06ba7176d681be63608698308f7f136ad4c43a12a84c56fafec5a2ab614d747076339177c7adaea787799bb4602304895056c7519863676537f76c951a06da881bf274f7cb0692d9eb271428157752c5a32ad3a8956967c7cbc84d757efd20302047c435bb500673065023100a75233812e1b80fb3938b6f62b1ab783adf105b04f94332735c6ce9b267131035bf4a52254c14c442ee2fca0100b5fc7023072e18f459cba51c663b35f51b1b31704c6d76bc2592b4ab436bb1c39ce9cbd37e7efb91cb08cf128a317c64cb88de6550302047c435bb500673065023100c0c66b978c0aad6684681f177e05b6aa90464fe4858ed78e236eeb22e4c526ad244d1f25e62d00d74e9d11444c30438802304e54e5c27c4a62d228b7b3a3d0c584546d873e6f3757325b282858dd23ec34c9566564ca31354c5c45ba0694a38f8a7d0302047c435bb500663064023061744a359a899e05f7ac5551f9279bbc19a992bc6fa71d8bf463de3c74fd7e69d5f51c865196e86efbd56e705bac1eaa02307e1457d500c698f3c2ab838de93c4d1bfa41f741c42a18c4dbd4892e653ea6a2af37658d1e37154cc4a7a4f39a7e777f0302047c435bb500683066023100cd98a46d3136adab9f75da479518cd461f449d9134a3bd81a210ebc9cbf2d4b90f69f8c06abde6605c6c6511d3a12b37023100de6668fd88d207400d5431829f0aab399fe660d8af2886db863b781101fb824da07b08747ee19ee629845494c15da0f40302047c435bb500683066023100b3e7e0b72f0e54c69181b4db9513abd1ddfb463fc167b3c66a54694b2b6e4db400332df3d1bd1ebc21ea998092197b75023100dd1d50ad97892d73991bebeb7b238d70c7ee8b8bb6255d2247b87e604160ce7d82215211e11a1f5a88b2fe528ef0e29c0302047c435bb5006630640230665441597ba7f1e397642e43d64d40a9af0367ba8d80fb6fdc84aebb99668942806f29c6e3be0e9f1ba3401647fcd71202300de87163049dcbce93f85ea50acf189b1f8506e713f2eb4cde2be3ed96fdc900ad7f868a1180932df770d79df81ac34b0302047c435bb5006630640230603cd7f35ca1da6e2f954e419b04353fcae89842ff992895fbc7ada474f288abb349b422eb8f608073bdafd9e9b83e2902300a014d8f8ce9f54c9985b00060b451a28ac9a7dbcdbf4bbb6c35202ccd272b4b37d239a311360659ecdd2949eeae46090302047c435bb50066306402305f1b7f0a03dbc2d132cb5b5ba22c9e818ebaa8849060ff8bcbb8eddf9541caedd04295e5e0dc72fd9dc8975cc0c7237802300cab71a84301d1e631ac3284a09ddd63b529ac18990ddea616279b785a4a1444be29ac0499c3d6efd7594c8aebb0f3400302047c435bb50066306402302bd3408bc0d34383b0b3faad57b44aa5ddb8875bebeaa7f9d90f55ef1001368d7374e25684d44dee0b3a1f077d1b40a102300344b58a16455070c9a0d38ef15feb711acd919c241874732b864a79d671234cee27e693fe76d10e809fce6eaa80ddd60302047c435bb50067306502306eea24feed4d6ee25602bf732b5d6791557118416b3aaa1cdb97e0e52ae659e39653a4827d675694a747263bde6bf0a702310088f522e29157de682c75695d97c357e9fc015e0cc0d026f9d6166c6dd4628f818008dfb4a249f98d3037008147f5122b0302047c435bb500683066023100c24de8a8d41a7842f7f60168721ee6c24f9f9e08426b8139d4faafe36f737bbd3e895f275a3c23b2684eddbc2b5b63e1023100e54b961f1128820a85711c5535d7fc486f2c13bd38299b0cfb67c4c50953fd1a9fc055df62d5db7675aad91c4eac73620302047c435bb500673065023074cce7ae8a0e925d224bfefb7199ec2915fc30642514444a64cae6d96aac3d94eebb87b15e678e3f5dea4524fbb553010231009c667778c52f6f41c0e4dc70b75bc1d3c51914dcd4f0711e7fdd0743c50993ef0d0d9f97254148c1f75c669c4ba4a2fc0302047c435bb500683066023100903dcdec881c3d85102111dc9ba2db03c806132fd16a4df1165b23c848fc3f334402752099682a9f801580e3a9329776023100af2a1dad79ac7792bc2c49003975c164664ca8c9769907e9a816881fb8e8423599f10d6bf18b5a51ffb0f43dab8196a50302047c435bb500663064023076cb4d7d78e5a7ce4d4548955cfe4b6c33dfb646533b838970e4792bbeab13fa3f021672c7b7c181314bbacc54608e770230544383eb847c3d973826fd01b9ddb1047ed68c733a2a0db960472f53abecfc61f3c3655cbaa55aa1f6b7e3665ba002c40302047c435bb5006530630230556a7daec659998d90780e2de0c9643050a24220b88636e0d64e3f167f04f70fc4b7ef9b1165c173242865ab2c8bc6d8022f11e0b72d6652021c7c146847ea69dad2ed5c0c7cf61b37971bae1d45b8399f3af5e248161fadb125d6a809d4459bf40302047c435bb500673065023100bda5c702e34f67a28d9fb30663c087abcfaa9f15fdeae9a1f042f7f99730025e5c331cf5226634a56d31f6a64c045fb30230581b526eb88839f594f81a8376dfdfbc2e1d10113f3d4d16121ee79fdc1657dbf2fe92d7f3bcc003043e15033afe7a500302047c435bb5006830660231008f4c6945a5bbce68debdaa47bf8b60e82dd67bdd06da48e966fbc81a2296022683f704c14bf75b9b61bad1f216a738b1023100d83323e0cfd35bd8dc944e23a284d8510e41aedd1fee7e11ea38dcbc70d5dba468f48a47874089e37e40f8389f88cbeb0302047c435bb500663064023073e5e2f9eebbc29cdc314ee130859315d5edea516a22b383cfd71ec1d80586e7dcb8c1442d805a44620676716c4bb7a4023079d3fb3baf90f45b02d1ff4c32ee72e6efa1c759bb41393454821c3ae3e64628b305feb205815bd214dba2aa3cb74fc00302047c435bb50067306502310089c227230cbb97fd76564ea4ad4724599baca0213212f5e748fbb4f51bfb74efa5c686c66ba2642a06a949bfcb8ad4d8023078f7c373ae3005c97f78ffc757638530a3f0902c9cffcbf0f8b7e2004d238f39bee7d11be09681fc7d8fbbdba28bb1030302047c435bb500673065023100b99f3c28d6bf2a6530505f50330e6aa1e33c6dfd962db77afe36c4decf8bec93351c9b1626e62c155c6cf57793dc0aad02305a7e99a6e3858d803d5e65e54315a427ab9da9742b131378f84a04219d6fa17517124b783a4d7db8181254edc0d3a6ea0302047c435bb500683066023100b9e327700f443c41dbefbb25c0745a21a75be7461e6054b37735adfa6a5309101856b59a13a3c3779c5aba3c539f7494023100c1234bc706670acaee1e9787da42e74d4d45187376ecf1e473079f143760be6d212b252c350e11b7d91b3deafcd044940302047c435bb500673065023100b5368e8f5ac359e61baa7d6f18e0e275056487e27aa3a491ac7b7eb1cd9f567a9feda284a4292c822da8801f96064fd402303a9e8d1f31f50fdc08df5aad58e0189a3cd9079fbed657998225272820f9c65b1dcea6b9a2e9a3ddeba8d275b657449e0302047c435bb500663064023078978f08fbad020f065fa5f801928387c062464546ea482822c8e2ac6dda5660437239e742f12da1023b0133a512a25d023022dfca2629df5c3ca3a1457b2f23e51696fa46ffc8e55093cb058bbadff872ff099dc2dfc96eace8be567b9fa1f2285c0302047c435bb5006830660231009ac36af0cb56bd8b90b2607abe38030ae5ffaf40ad36e0ad7091371118c024503cf46b797b1afaea5f413d8040d22bab023100d083f8ee4235897fbea28fc4cdc4204c2d5ef04bd64b6cb909eca583632cc4d3c5e612169b36281c84272ddc6b086c150302047c435bb50068306602310087952c097dd0b144f5b202c8f80055c0496fbeeae05b261325b9e3c9aaee086d2d3f4636b43cfbf6da0708326c06c8dd023100c4addfbe2c7ff35fd43264eed7df78e50394e3d9ac63e0f7d48e90eb63cd8b7199a2c4344facc3aadcbc7767a12b10840302047c435bb500663064023009b36c4b631fbdca0a6a1586286da067b99279d2b67e0cec53c35288913b29c2a1c41150cebfeaee6b287a909247bdd602303de62edc41b002f0ab86169f496930499203418d714401b222d98e50841bdab27e425272abc6948c761e609da75a0ade0302047c435bb50067306502305b1618bd6c4e0a5ce7af1ed49c39951ba25dafa2bbe5a92c92dd010294f3cacc2a8156337810051dc2eeeadb00caa8b7023100e7577fa33b3fa40e5a9a7c0cb8a1dec29b5ba22bbb6e9489ce097d13858a69c2c386428e9e4229517c6be57890c176490302047c435bb500683066023100ca104cdee3cab8b4987778906f146502f509e537bb154d505c295fc17190a61544c4d090cfb2b5f386f716bd5ff81430023100ed95529c381d33ce33179e14cbf5b17aec4de37e465a6bbe3633e208613e18dbe61cedf31aefeda88127cafc7face1f80302047c435bb500683066023100d5b0fa0f8af7cdec87970bee8b8a21906205563e75002efceb766a182a5190fd4e97eb941fdea1754ae064b082ffd4c0023100e1ecd72443e9a58b45f4c9512f66926b29a649d54ae1b9f85872e0f6ce9f656c9e186fc06cd436ebf3b81643c95bc7bb0302047c435bb500673065023069a69833279fbc65ce8e61892a1dfc37df8e13d62f91528eac8174fcae6acdfd997bfc767ef68eb2399b32ba4cf08122023100a5a632e486e942c3919f4bfc7e2705709c91cc7ce9e84db82c16f3fbaa5cfb0ac938caf1a7e8480b91501f004120fbe10302047c435bb5006830660231009787866366e2829c8fae980b419fe8546ee4edfa0762fdd762d234fb7d2efe5c605157247add0a679bc6c61c5834efdd023100a7b141144e07a735506ec2c6471afd989231375a15afed860e1f42b7ac0454f2bc1ad1150519929f3e53715f7860361c0302047c435bb500663064023062adc10aee82c20db6947d09c4181b9425524e4631fcabc84227fa8b9e0b682ae15ca94b9bd77d3264ff4c3ab1bb588a02304c268d0ad602938dd999e5b8240b697fd8ebf0c144eac97466c1c60c4a263b2ee906eaf231ee79b1b02cacc621bbcb710302047c435bb50066306402305e94f69da2abbec428b8cb8ffb1b34305c758ad3392f2632e11a6ccf929c26fbb3f887925ceb83365ed5a140f922402802306910d9e705987b0328e4d8afa1e45487741afc56337c9b9b18218825a3def967073cb532113d20b4a05a2bc5529339aa0302047c435bb500683066023100b92ca2919cc84ead56b80de89caf75c564b0f584be401ea3e5b27f8c9c63f91b500df30aee0cf9fc5fda27f62fb54b52023100dfb8524c23cfdd525b4528e7f5c0eaf83f651472700364f14230663fb3343788832dd67a85a017f15f1ff26a4cb881590302047c435bb500683066023100a913c3342ff8cd4f5a0a3f3a0141d4a1e6f76dc37fccce2fac7b5baa39d6be861589bbac175e0621b71a34b9a08088e9023100d05a1076cbc395c5ac3882b291bdc59733f00a04cb888441a010a0fda416e03ab7922a123fb8334c3c642d38b3fc725f0302047c435bb500683066023100c9f44acab3f8b3d83ca80fbde5863b427ef128ccc40edeb5be62b129816753f59c1408b3b6830a001ed0e996ee99295a023100ec83cf8546d5a2a44b4e02441db87a0e05ec344f351e5513247a7d866864616f687aa5b65ebef09781240b6dd843ae5a0302047c435bb500673065023100bd30e28f8bfc71ddf53f69031f6df9c1e55c02c458b4f8836d4e31fa1ecbb989b668521503211592f29141700ba174af0230211bf308d4dbd9f8fbf7fbee0bbf007eaeec461d5cf01884303fd30b7315798925952cf8c64ba9ee6b314dd2197c0f410302047c435bb5006730650230593b304771ea653dc924bec34b2329c285f40e67871e28fb3603c79b0e7ad06563da1302b1ddc3dd0ee12d4584232b5b023100ec11fd187a55c1f92b84d6c29630c66874674c7c44fe26e163bb555a14a64bf43dec8ad043aaa1054d031eddc9333ac50302047c435bb50066306402302d02cc481da40b3ac6bdce9aaec401a07dd6b8506b1abed774c08571d697a242023a422fda6fc11a7351113b35cc4ee9023068f742debb6ff09a7c5e12c0c85831fd3e56dee34db4538a6354c5450a639960ffcb805c5ab4ee2797cca517bf6c334a0302047c435bb500673065023100b70d14ad0c487554a0911eb71ceb76b61b6506ec9666f1ce1f6d06ca87506ab4b8f2c59e088d01a67dcc78f93429d5bf023003dcb175d4bcfa9b1ad18dd6af8001e6670c6ac2c8ee11c7e9fd1a03d28adc8fe6fecde3b42fb72df309b8cdab4174390302047c435bb50066306402304a0005395a27c7c5f60ae6cbc664bd58a4a1b2047c4540b0196f513db2ec162bf8a5636240a65dbd0b036464fb5e354b023071fa88453c917b538885b56a4d1e9f0cbda1ea4248a5f815d06d5debbf4cb0e9a5c9a413bed394f28991e08e6e088f2e0302047c435bb50066306402306d1c22b49ab1e7cfd1b5b9f6d50875b364ce9dc780d1e5fa0edf8e20641438bacd2730d8904997e34c34599a8f4e4117023079354ef259ad677ad58618e9fb23e7cba2a0d52e488995675bff660a97339b8b9688feeca51ae0c250baaa876cf381270302047c435bb50067306502310093198bf684d1f40506e2550da6ebaa6fb5da4e7bd86bd04263553bafbb194988241d731d83c1712d546456e07858fcab023034543d42c0bee3ba01b788ffaecc9bc42141e1e93f73137217277cfa4d288036ac624e04fd43b73e3130ac0765e5036f0302047c435bb500673065023100ea55944f001085a579e81892bb64810945012dc13513dbf891b252aca1d7a4dda18f3d1cf00e1f40cbca77b9cfca9545023045f850d75b39f46d7277b5df5dd20982af4aaa0ae096d11ada9ebc96269e59d1c8afe056b324e4ba91dab2410760cf1f0302047c435bb500663064023051033a4dbdba8374800d2aff685aa97f0545abcb72960abeef0803fed57af411dece8e7a25449a07469f9d117301b2ad02301be019ec1db3daddeaaa8e5e0bc6098b05c98624dcb261f0b96b81ba96ddab41e9ba0095e4d0f11930f859fdc91cecbf0302047c435bb50066306402301c873362e4a8a52817eeee05497080d4ce3f23c1c863378d040f60ae3fe3eab1b2ea385697452f1833c8d43f17be03bf02306ade111c7b64010206eaf71527b877aa71f8e71ee28ebbcbac00826d60944e7d84e6fa2a1e5bb2eb73419d8742e455750302047c435bb500663064023030e7e854d3c0705f218d247e02a379a4ef43c45a4d8f3dd525932f483044f5a9b5fd62e3ce50778d52bc2106962717f202305487d2290e7689dba876d0d54a36815e8a48840287b5fce3f4f055d49349de33d253041f8de678d695c5aca281ba0a340302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb50066306402303fb447cafde6e22f5a4b2a8d179f9746ef76034ee153b04a3012a6ee488944b00a8ffaa303210c64f89a6995cd402ab002304d501f9789f1e6cdb8b10583830cd4318ca2c09e224e96adf7882da4e7dc344e042f3f686c494d150f5e284f0a4bf6930302047c435bb5006730650230214f879f23c20c94808d3b9d00ee361f15645487b9642b06471141d6436d8033d4a29bcaf533e10123e3a82ed4bffa2c023100f29c030978e087c43fb40cd7505b55f6468f326e88ba18769e3a437ada94845473b845d50032b06d9914b7e7f82677910302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500673065023100e2ccaf59ccdc6041dfb69c6345e5b3781a92a9e8349ae3cb7868ffbf93b0ad93959f9674f8e9b523da064bad185c7c7502300b9749c7bb60661afe39cf1f1106e6e4f8022f61ceeea13c803e35d65efe4410881e414c9d6968bf83824d4fe419e4380302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b2320302047c435bb500663064023050d81c373a776c00eab38e904381a603274a53fa8d711857519742625739f85883238af2c91d57e6c5f35bfffa8b4c260230634c1041e6f0c578ead5e03f101a6a4ccda7ac0f1152ce093d85921d39ded44a73a3e65932ef29a5e0dc2551fd50b232 idAv U]= }8#κҲWۊz,]E+U})&;աRi_>oA4iE}v?W_+VY%%>hȃ*EDl^,ѵ{C:"!w灬3j[PF܋U![=_Orq*VhX K.iqz;0]#ZKFEQ&/xs+h4nqc֞%>F[CO; 7~ H_l-|C:[͗5""Ui!nc׏q 7#rF/Ȕ ~L"mq畾ihkk)kdҢ"j&wH>`B ? d 5 U,07>E Xd|  "  L  K M\QW\\a aP a| bA bbb(b8b9i:t=VB^GtHIX4Y@Z[\]^O!bdJeOfRlTtpuv $ ( . p tCipa-server-common4.9.125.module_el8+551+ca600d0eCommon files used by IPA serverIPA is an integrated solution to provide centrally managed Identity (users, hosts, services), Authentication (SSO, 2FA), and Authorization (host access control, SELinux user roles, services). The solution provides features for further integration with Linux based clients (SUDO, automount) and integration with Active Directory based infrastructures (Trusts). If you are installing an IPA server, you need to install this package.daarch64-03.stream.rdu2.redhat.com%PCentOSCentOSGPLv3+builder@centos.orgUnspecifiedhttp://www.freeipa.org/linuxnoarch# create users and groups # create kdcproxy group and user getent group kdcproxy >/dev/null || groupadd -f -r kdcproxy getent passwd kdcproxy >/dev/null || useradd -r -g kdcproxy -s /sbin/nologin -d / -c "IPA KDC Proxy User" kdcproxy # create ipaapi group and user getent group ipaapi >/dev/null || groupadd -f -r ipaapi getent passwd ipaapi >/dev/null || useradd -r -g ipaapi -s /sbin/nologin -d / -c "IPA Framework User" ipaapi # add apache to ipaaapi group id -Gn apache | grep '\bipaapi\b' >/dev/null || usermod apache -a -G ipaapi  (i -D4l)*D* SG8#tUBEw .["fmm"- ] %&}u=oL'* DF .U5 - 0pL6Au?pk1AthLthjzf~@"i* Z6qNgXI8 M HOo'H w$q tZsAWB` lf;v7G.4p9\s@*dR:KAAA큤A큤A큤AA큤A큤A큤A큤A큤AA큤A큤AA큤A큤A큤A큤A큤A큤A큤AAAAAAAAA@d'd'd'd'd'd'd&a2a2d&dea2dededed d dedg-ba2a2a2a2bfa2bfdg-]a2a2a2a2a2dg-]a2a2a2a2a2a2a2d&d&a2a2a2a2a2a2a2a2a2dg-]a2a2a2a2a2a2a2a2a2a2bfbfbfa2a2a2a2a2a2a2bfa2a2a2d'd'd'd'd'd&d&a2a2a2a2a2ba,xa2a2a2a2a2a2a2dg-]dg-]a2a2ba,xa2a2a2a2a2bfa2dg+a2a2a2a2a2a2a2a2d&a2dg-]a2a2a2a2a2a2a2a2a2a2a2d&a2a2a2a2a2a2a2a2a2a2a2a2a2a2a2a2d&a2a2a2a2a2d&d&a2ddNa2a2d'a2a2a2a2d&d&a2d&ddd&a2a2a2a2a2a2a2da2a2d&a2a2a2d&a2a2a2a2a2a2a2a2a2dg+dg-]a2a2a2a2bfa2a2a2a2a2a2a2a2a2a2a2bfa2a2a2a2a2a2bfa2bfa2a2a2a2a2a2a2a2a2a2a2a2a2a2a2a2a2a2a2a2a2a2a2a2bfa2a2a2a2ca2a2a2a2a2d&a2a2dedg/d'd'd'd'd'd'ded'd'd'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../../../../etc/ipa/html/ssbrowser.html../../../../etc/ipa/html/unauthorized.htmlQQQQQQQ@Q@@@@@@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootnamedrootrootrootrootrootrootrootrootrootrootrootrootnamednamedrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootpkiuserrootrootrootrootnamedipa-4.9.12-5.module_el8+551+ca600d0e.src.rpmconfig(ipa-server-common)freeipa-server-commonipa-server-common     /bin/shconfig(ipa-server-common)custodiahttpdipa-client-commonrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)system-logos-ipasystemd-units4.9.12-5.module_el8+551+ca600d0e0.3.12.4.37-214.9.12-5.module_el8+551+ca600d0e3.0.4-14.6.0-14.0-15.2-180.4239freeipa-server-common4.14.3d-@dd@doMdm@cR@c]cc\ca @cob֜bb@bbbbL/@bs@b D@b D@b@aaA@a@aW@aW@aW@aa@a`]`#@``ݮ@`D`dd@`*b@`U_@__@_$_$_@_@_Z@_=@_:q@_$__ @^@^^^^^?@^^J@^J@^1s^!]]]]]߶]]]҇]A]g@]Z@]UI@]R@]D%]@1@]-@],j]]\@\@\!\\v{\=@\@W@V@VVZV@U@UYU@Uݪ@Uݪ@Uݪ@UoUU(UK@Ub@UJ@UU @U hTE@T T}TTZ@TZ@Tp@T5T@TuTto@TsTl@Td@Ta@T[bTG@TG@TFJT)IT%U@T$TSS:@S2@S1oS!S!S L@S L@Sc@SS @Rb@R@R@RUR@RRx@RR=RʚRƦ@RkRv@RG@RiRz/@RxRsRo@Ro@R^RW@RNR@-@R/ R-@R(r@R7RZ@R R R@R@R@R@R@R6QQQ'@Q@QvwQu&@Qm=@QZ@QVQ(@Q@PPPPPx@Px@PnPj@P\VPG>P@@P4P.2@PP @M6@M.@M.@M.@M-M M@L!LfLNLdLLLzLe3La?@LD>@L#HL#HL@K/KՀ@KK@KKs@Kie@K`*KK@K @JJ@J@J@JJB@J{IIIm@I1Iq@IKIFFI9I1.Ih@IIP@H@HXHO@H-w@H HHH@G߮GGgGs@G@G@G@G}G}G}GG@GC@GkGDG<4G)G(n@G3G@GJF@FS@FFuF@Rafael Jeffman - 4.9.12-5Rafael Jeffman - 4.9.12-4Julien Rische - 4.9.12-3Rafael Jeffman - 4.9.12-2Rafael Jeffman - 4.9.12-1Rafael Jeffman - 4.9.11-3Rafael Jeffman - 4.9.11-2Rafael Jeffman - 4.9.11-1Rafael Jeffman - 4.9.10-8Rafael Jeffman - 4.9.10-7Rafael Jeffman - 4.9.10-6Rafael Jeffman - 4.9.10-5Rafael Jeffman - 4.9.10-4Rafael Jeffman - 4.9.10-3Rafael Jeffman - 4.9.10-2Rafael Jeffman - 4.9.10-1Rafael Jeffman - 4.9.8-8Rafael Jeffman - 4.9.8-7Rafael Jeffman - 4.9.8-6Rafael Jeffman - 4.9.8-5Rafael Jeffman - 4.9.8-4Rafael Jeffman - 4.9.8-3Rafael Jeffman - 4.9.8-2Rafael Jeffman - 4.9.8-1Alexander Bokovoy - 4.9.6-9.1Alexander Bokovoy - 4.9.6-9Alexander Bokovoy - 4.9.6-8Alexander Bokovoy - 4.9.6-7Alexander Bokovoy - 4.9.6-6Alexander Bokovoy - 4.9.6-5Thomas Woerner - 4.9.6-4Thomas Woerner - 4.9.6-3Thomas Woerner - 4.9.6-2Thomas Woerner - 4.9.6-1Thomas Woerner - 4.9.5-1Thomas Woerner - 4.9.3-1Alexander Bokovoy - 4.9.2-1Alexander Bokovoy - 4.9.1-1Thomas Woerner - 4.9.0-1Thomas Woerner - 4.9.0-0.5.rc3Alexander Bokovoy - 4.9.0-0.3.rc2Thomas Woerner - 4.9.0-0.2.rc2Thomas Woerner - 4.9.0-0.1.rc1Thomas Woerner - 4.9.0-0.rc1Thomas Woerner - 4.8.7-11Thomas Woerner - 4.8.7-10Thomas Woerner - 4.8.7-9Thomas Woerner - 4.8.7-8Thomas Woerner - 4.8.7-7Thomas Woerner - 4.8.7-6Thomas Woerner - 4.8.7-5Thomas Woerner - 4.8.7-4Thomas Woerner - 4.8.7-3Thomas Woerner - 4.8.7-2Thomas Woerner - 4.8.7-1Thomas Woerner - 4.8.6-2Thomas Woerner - 4.8.6-1Thomas Woerner - 4.8.4-6Thomas Woerner - 4.8.4-5Thomas Woerner - 4.8.4-4Alexander Bokovoy - 4.8.4-3Thomas Woerner - 4.8.4-2Thomas Woerner - 4.8.4-1Thomas Woerner - 4.8.3-3Thomas Woerner - 4.8.3-2Alexander Bokovoy - 4.8.3-1Alexander Bokovoy - 4.8.2-4Thomas Woerner - 4.8.2-3Thomas Woerner - 4.8.2-2Thomas Woerner - 4.8.2-1Thomas Woerner - 4.8.0-10Thomas Woerner - 4.8.0-9Thomas Woerner - 4.8.0-8Thomas Woerner - 4.8.0-7Thomas Woerner - 4.8.0-6Thomas Woerner - 4.8.0-5Alexander Bokovoy - 4.8.0-4Alexander Bokovoy - 4.8.0-3Thomas Woerner - 4.8.0-2Thomas Woerner - 4.8.0-1Alexander Bokovoy - 4.7.90-3Alexander Bokovoy - 4.7.90-2Thomas Woerner - 4.7.90-1Alexander Bokovoy - 4.7.1-12Rob Crittenden - 4.7.1-11Christian Heimes - 4.7.1-10Thomas Woerner - 4.7.1-9Christian Heimes - 4.7.1-8Thomas Woerner - 4.7.1-7.el8Lumír Balhar - 4.7.1-6.el8Alexander Bokovoy - 4.7.1-5.el8Alexander Bokovoy - 4.7.1-4.el8Thomas Woerner - 4.7.1-3.el8Alexander Bokovoy - 4.7.1-2.el8Alexander Bokovoy - 4.7.1-1.el8Tomas Orsava - 4.7.0-6.el8Rob Crittenden - 4.7.0-5.el8Rob Crittenden - 4.7.0-4.el8Thomas Woerner - 4.7.0-3.1.el8Thomas Woerner - 4.7.0-3.el8Alexander Bokovoy - 4.7.0-2.el8Rob Crittenden - 4.7.0-1.el8Rob Crittenden - 4.6.90.pre1-2.el8Rob Crittenden - 4.6.90.pre1-1.el8Troy Dawson - 4.5.4-5.el8.1Alexander Bokovoy - 4.5.4-5.el7Pavel Vomacka - 4.5.4-4.el7Rob Crittenden - 4.5.4-3.el7Felipe Barreto - 4.5.4-2.el7Pavel Vomacka - 4.5.4-1.el7Felipe Barreto - 4.5.0-21.el7.2.2Felipe Barreto - 4.5.0-21.el7.2Pavel Vomacka - 4.5.0-21.el7.1.2Pavel Vomacka - 4.5.0-21.el7.1.1Pavel Vomacka - 4.5.0-21.el7.1Pavel Vomacka - 4.5.0-21.el7Pavel Vomacka - 4.5.0-20.el7Pavel Vomacka - 4.5.0-19.el7Pavel Vomacka - 4.5.0-18.el7Pavel Vomacka - 4.5.0-17.el7Pavel Vomacka - 4.5.0-16.el7Pavel Vomacka - 4.5.0-15.el7Pavel Vomacka - 4.5.0-14.el7Pavel Vomacka - 4.5.0-13.el7Pavel Vomacka - 4.5.0-12.el7Jan Cholasta - 4.5.0-11.el7Jan Cholasta - 4.5.0-10.el7Jan Cholasta - 4.5.0-9.el7Jan Cholasta - 4.5.0-8.el7Jan Cholasta - 4.5.0-7.el7Pavel Vomacka - 4.5.0-6.el7Jan Cholasta - 4.5.0-5.el7Jan Cholasta - 4.5.0-4.el7Jan Cholasta - 4.5.0-3.el7Jan Cholasta - 4.5.0-2.el7Jan Cholasta - 4.5.0-1.el7Jan Cholasta - 4.4.0-14.7Jan Cholasta - 4.4.0-14.6Jan Cholasta - 4.4.0-14.5Jan Cholasta - 4.4.0-14.4Jan Cholasta - 4.4.0-14.3Jan Cholasta - 4.4.0-14.2Jan Cholasta - 4.4.0-14.1Jan Cholasta - 4.4.0-14Jan Cholasta - 4.4.0-13Petr Vobornik - 4.4.0-12Jan Cholasta - 4.4.0-11Jan Cholasta - 4.4.0-10Jan Cholasta - 4.4.0-9Jan Cholasta - 4.4.0-8Jan Cholasta - 4.4.0-7Jan Cholasta - 4.4.0-6Jan Cholasta - 4.4.0-5Jan Cholasta - 4.4.0-4Jan Cholasta - 4.4.0-3Petr Vobornik - 4.4.0-2.1Petr Vobornik - 4.4.0-2Jan Cholasta - 4.4.0-1Jan Cholasta - 4.4.0-0.2.alpha1Jan Cholasta - 4.4.0-0.1.alpha1Jan Cholasta - 4.3.1-0.201605241723GIT1b427d3.1Jan Cholasta - 4.3.1-0.201605241723GIT1b427d3Jan Cholasta - 4.3.1-0.201605191449GITf8edf37.1Jan Cholasta - 4.3.1-0.201605191449GITf8edf37Jan Cholasta - 4.2.0-16Jan Cholasta - 4.2.0-15Jan Cholasta - 4.2.0-14Jan Cholasta - 4.2.0-13Jan Cholasta - 4.2.0-12Jan Cholasta - 4.2.0-11Jan Cholasta - 4.2.0-10Jan Cholasta - 4.2.0-9Jan Cholasta - 4.2.0-8Jan Cholasta - 4.2.0-7Jan Cholasta - 4.2.0-6Jan Cholasta - 4.2.0-5Jan Cholasta - 4.2.0-4Jan Cholasta - 4.2.0-3Jan Cholasta - 4.2.0-2Jan Cholasta - 4.2.0-1Jan Cholasta - 4.2.0-0.2.alpha1Jan Cholasta - 4.2.0-0.1.alpha1Jan Cholasta - 4.1.0-18.3Alexander Bokovoy - 4.1.0-18.2Jan Cholasta - 4.1.0-18.1Martin Kosek - 4.1.0-18Jan Cholasta - 4.1.0-17Jan Cholasta - 4.1.0-16Jan Cholasta - 4.1.0-15Jan Cholasta - 4.1.0-14Jan Cholasta - 4.1.0-13Jan Cholasta - 4.1.0-12Jan Cholasta - 4.1.0-11Jan Cholasta - 4.1.0-10Jan Cholasta - 4.1.0-9Jan Cholasta - 4.1.0-8Jan Cholasta - 4.1.0-7Jan Cholasta - 4.1.0-6Jan Cholasta - 4.1.0-5Jan Cholasta - 4.1.0-4Jan Cholasta - 4.1.0-3Jan Cholasta - 4.1.0-2Jan Cholasta - 4.1.0-1Jan Cholasta - 4.1.0-0.1.alpha1Petr Vobornik - 4.0.3-3Jan Cholasta - 4.0.3-2Jan Cholasta - 4.0.3-1Martin Kosek - 3.3.3-29Martin Kosek - 3.3.3-28Martin Kosek - 3.3.3-27Martin Kosek - 3.3.3-26Martin Kosek - 3.3.3-25Martin Kosek - 3.3.3-24Martin Kosek - 3.3.3-23Martin Kosek - 3.3.3-22Martin Kosek - 3.3.3-21Martin Kosek - 3.3.3-20Martin Kosek - 3.3.3-19Martin Kosek - 3.3.3-18Martin Kosek - 3.3.3-17Martin Kosek - 3.3.3-16Daniel Mach - 3.3.3-15Martin Kosek - 3.3.3-14Martin Kosek - 3.3.3-13Martin Kosek - 3.3.3-12Martin Kosek - 3.3.3-11Martin Kosek - 3.3.3-10Martin Kosek - 3.3.3-9Martin Kosek - 3.3.3-8Daniel Mach - 3.3.3-7Martin Kosek - 3.3.3-6Martin Kosek - 3.3.3-5Martin Kosek - 3.3.3-4Martin Kosek - 3.3.3-3Martin Kosek - 3.3.3-2Martin Kosek - 3.3.3-1Martin Kosek - 3.3.2-5Martin Kosek - 3.3.2-4Martin Kosek - 3.3.2-3Martin Kosek - 3.3.2-2Martin Kosek - 3.3.2-1Martin Kosek - 3.3.1-5Martin Kosek - 3.3.1-4Martin Kosek - 3.3.1-3Martin Kosek - 3.3.1-2Rob Crittenden - 3.3.1-1Rob Crittenden - 3.3.0-7Martin Kosek - 3.3.0-6Martin Kosek - 3.3.0-5Martin Kosek - 3.3.0-4Martin Kosek - 3.3.0-3Martin Kosek - 3.3.0-2Martin Kosek - 3.3.0-1Martin Kosek - 3.3.0-0.2.beta2Martin Kosek - 3.3.0-0.1.beta2Martin Kosek - 3.2.2-1Martin Kosek - 3.2.1-1Rob Crittenden - 3.2.0-2Rob Crittenden - 3.2.0-1Rob Crittenden - 3.2.0-0.4.beta1Rob Crittenden - 3.2.0-0.3.beta1Rob Crittenden - 3.2.0-0.2.beta1Martin Kosek - 3.2.0-0.1.pre1Kevin Fenzi 3.1.2-4Kevin Fenzi - 3.1.2-3Fedora Release Engineering - 3.1.2-2Rob Crittenden - 3.1.2-1Martin Kosek - 3.1.0-2Rob Crittenden - 3.1.0-1Martin Kosek - 3.0.0-3Rob Crittenden - 3.0.0-2Rob Crittenden - 3.0.0-1Rob Crittenden - 3.0.0-0.10Martin Kosek - 3.0.0-0.9Rob Crittenden - 3.0.0-0.8Rob Crittenden - 3.0.0-0.7Rob Crittenden - 3.0.0-0.6Alexander Bokovoy - 3.0.0-0.5Rob Crittenden - 3.0.0-0.4Martin Kosek - 3.0.0-0.3Alexander Bokovoy - 3.0.0-0.2Rob Crittenden - 3.0.0-0.1Rob Crittenden - 2.2.0-1Rob Crittenden - 2.1.90-0.2Rob Crittenden - 2.1.90-0.1Alexander Bokovoy - 2.1.4-5Martin Kosek - 2.1.4-4Alexander Bokovoy - 2.1.4-3Alexander Bokovoy - 2.1.4-2Rob Crittenden - 2.1.4-1Rob Crittenden - 2.1.3-8Alexander Bokovoy - 2.1.3-7Alexander Bokovoy - 2.1.3-6Fedora Release Engineering - 2.1.3-5Alexander Bokovoy - 2.1.3-4Alexander Bokovoy - 2.1.3-3Alexander Bokovoy - 2.1.3-2Alexander Bokovoy - 2.1.3-1Alexander Bokovoy - 2.1.2-1Rob Crittenden - 2.1.0-1Simo Sorce - 2.0.1-2Rob Crittenden - 2.0.1-1Rob Crittenden - 2.0.0-1Rob Crittenden - 2.0.0-0.4.rc2Rob Crittenden - 2.0.0-0.3.rc1Rob Crittenden - 2.0.0-0.1.rc1Fedora Release Engineering - 2.0.0-0.2.beta2Rob Crittenden - 2.0.0-0.1.beta2Rob Crittenden - 2.0.0-0.2.beta.git80e87e7Rob Crittenden - 2.0.0-0.1.beta.git80e87e7Rob Crittenden - 1.99-41Adam Young - 1.99-40Simo Sorce - 1.99-39Simo Sorce - 1.99-38Rob Crittenden - 1.99-37Rob Crittenden - 1.99-36Rob Crittenden - 1.99-35Jr Aquino - 1.99-34Simo Sorce - 1.99-33Rob Crittenden - 1.99-32Rob Crittenden - 1.99-31Rob Crittenden - 1.99-30Rob Crittenden - 1.99-29Rob Crittenden - 1.99-28Rob Crittenden - 1.99-27Rob Crittenden - 1.99-26Rob Crittenden - 1.99-25Adam Young - 1.99-24Rob Crittenden - 1.99-23Rob Crittenden - 1.99-22Rob Crittenden - 1.99-21Rob Crittenden - 1.99-20Rob Crittenden - 1.99-19Jason Gerard DeRose - 1.99-18Jason Gerard DeRose - 1.99-17Jason Gerard DeRose - 1.99-16Rob Crittenden - 1.99-15Jason Gerard DeRose - 1.99-14Rob Crittenden - 1.99-13Rob Crittenden - 1.99-12Rob Crittenden - 1.99-11Rob Crittenden - 1.99-10Rob Crittenden - 1.99-9Jason Gerard DeRose - 1.99-8Rob Crittenden - 1.99-7Rob Crittenden - 1.99-6Rob Crittenden - 1.99-5Rob Crittenden - 1.99-4Rob Crittenden - 1.99-3Rob Crittenden - 1.99-2Rob Crittenden - 1.99-1Tomas Mraz - 1.2.1-3Dan Walsh - 1.2.1-2Simo Sorce - 1.2.1-1Simo Sorce - 1.2.1-0Ignacio Vazquez-Abrams - 1.2.0-4Simo Sorce - 1.2.0-3Simo Sorce - 1.2.0-2Rob Crittenden - 1.2.0-1Simo Sorce - 1.1.0-3Rob Crittenden - 1.1.0-2Rob Crittenden - 1.1.0-1Rob Crittenden - 1.0.0-5Rob Crittenden - 1.0.0-4Rob Crittenden - 1.0.0-3Rob Crittenden - 1.0.0-2Rob Crittenden - 1.0.0-1Rob Crittenden 0.99-12Rob Crittenden 0.99-11Rob Crittenden 0.99-10Rob Crittenden 0.99-9Rob Crittenden 0.99-8Rob Crittenden 0.99-7Rob Crittenden 0.99-6Rob Crittenden 0.99-5Rob Crittenden 0.99-4Rob Crittenden 0.99-3Rob Crittenden 0.99-2Rob Crittenden 0.99-1Rob Crittenden - 0.6.0-2Karl MacMillan - 0.6.0-1Karl MacMillan - 0.5.0-1Rob Crittenden - 0.4.1-2Karl MacMillan - 0.4.1-1Karl MacMillan - 0.4.0-6Rob Crittenden - 0.4.0-5Rob Crittenden - 0.4.0-4Karl MacMillan - 0.4.0-3Karl MacMillan - 0.4.0-2Karl MacMillan - 0.2.0-1Rob Crittenden - 0.1.0-3Rob Crittenden - 0.1.0-2Karl MacMillan - 0.1.0-1- Upgrade: fix replica agreement, fix backported patch Related: RHBZ#2216551- kdb: Use-krb5_pac_full_sign_compat() when available Resolves: RHBZ#2176406 - OTP: fix-data-type-to-avoid-endianness-issue Resolves: RHBZ#2218293 - Upgrade: fix replica agreement Resolves: RHBZ#2216551 - Upgrade: add PKI drop-in file if missing Resolves: RHBZ#2215336 - Use the python-cryptography parser directly in cert-find Resolves: RHBZ#2164349 - Backport test updates Resolves: RHBZ#221884- Rely on sssd-krb5 to include SSSD-generated krb5 configuration Resolves: RHBZ#2214563- Use the OpenSSL certificate parser in cert-find Resolves: RHBZ#2209947- Rebase ipa to 4.9.12 Resolves: RHBZ#2196425 - user or group name: explain the supported format Resolves: RHBZ#2150217- Revert DNSResolver Fix use of nameservers with ports. Related: RHBZ#2141316- webui IdP: Remove arrow notation due to uglify-js limitation Related: RHBZ#2141316- Rebase ipa to 4.9.11 Resolves: RHBZ#2141316 - updates: fix memberManager ACI to allow managers from a specified group Resolves: RHBZ#2056009 - Defer creating the final krb5.conf on clients Resolves: RHBZ#2148259 - Exclude installed policy module file from RPM verification Resolves: RHBZ#2149567 - Spec file: ipa-client depends on krb5-pkinit-openssl Resolves: RHBZ#2149889- ipa man page format the EXAMPLES section Resolves: RHBZ#2129895 - Fix canonicalization issue in Web UI Resolves: RHBZ#2127035 - Remove idnssoaserial argument from dns zone API. Resolves: RHBZ#2108630 - Warn for permissions with read/write/search/compare and no attrs Resolves: RHBZ#2098187 - Add PKINIT support to ipa-client-install Resolves: RHBZ#2075452 - Generate CNAMEs for TXT+URI location krb records Resolves: RHBZ#2104185 - Vault: fix interoperability issues with older RHEL systems Resolves: RHBZ#2144737 - Fix typo on ipaupgrade.log chmod during RPM %post snipppet Resolves: RHBZ#2140994- Rebuild to samba 4.17.2. Related: RHBZ#2132051- webui: Allow grace login limit Resolves: RHBZ#2109243 - check_repl_update: in progress is a boolean Resolves: RHBZ#2117303 - Disabling gracelimit does not prevent LDAP binds Resolves: RHBZ#2109236 - Set passwordgracelimit to match global policy on group pw policies Resolves: RHBZ#2115475- webui: Do not allow empty pagination size Resolves: RHBZ#2094672- Add end to end integration tests for external IdP Resolves: RHBZ#2106346- Add explicit dependency for libvert-libev Resolves: RHBZ#2104929- Preserve user: fix the confusing summary Resolves: RHBZ#2022028 - Only calculate LDAP password grace when the password is expired Related: RHBZ#782917- Rebase to upstream release 4.9.10 Remove upstream patches 0002 to 0016 that are part of version 4.9.10 Remove patches 1101 that is part of version 4.9.10 Rename patch 0001 to 1002 as it will be used in future RHEL 8 releases Add patches 0001 and 0002 to fix build on RHEL 8.7 Resolves: RHBZ#2079466 Resolves: RHBZ#2063155 Resolves: RHBZ#1958777 Resolves: RHBZ#2068088 Resolves: RHBZ#2004646 Resolves: RHBZ#782917 Resolves: RHBZ#2059396 Resolves: RHBZ#2092015- Backport latest test fixes in python3-ipatests Resolves: RHBZ#2060841 - extdom: user getorigby{user|group}name if available Resolves: RHBZ#2062379 - Set the mode on ipaupgrade.log during RPM post snipppet Resolves: RHBZ#2061957 - test_krbtpolicy: skip SPAKE-related tests in FIPS mode Resolves: RHBZ#1909630- ipatests: Backport test fixes in python3-ipatests. Resolves: RHBZ#2057505- ipatests: fix TestOTPToken::test_check_otpd_after_idle_timeout Related: RHBZ#2053024- ipatests: remove additional check for failed units. Resolves: RHBZ#2053024 - ipa-cldap: fix memory leak. Resolves: RHBZ#2032738- Don't always override the port in import_included_profiles Fixes: RHBZ#2022483 - Remove ipa-join errors from behind the debug option Fixes: RHBZ#2048558 - Enable the ccache sweep timer during installation Fixes: RHBZ#2051575- Config plugin: return EmptyModlist when no change is applied. Resolves: RHBZ#2031825 - Custodia: use a stronger encryption algo when exporting keys. Resolves: RHBZ#2032806 - ipa-kdb: do not remove keys for hardened auth-enabled users. Resolves: RHBZ#2033342 - ipa-pki-proxy.conf: provide access to /kra/admin/kra/getStatus Resolves: RHBZ#2049167 - Backport latest test fxes in python3 ipatests. Resolves: RHBZ#2048509 - Removed unused patch files that were part of 4.9.8 rebase.- Revert bind-pkcs11-utils configuration in freeipa.spec. Resolves: RHBZ#2026732- Upstream release FreeIPA 4.9.8 Related: RHBZ#2015607 - Hardening for CVE-2020-25717- Fix S4U2Self regression for cross-realm requester SID buffer - Related: RHBZ#2021443- Require samba 4.14.5-13 with IPA DC server role fixes - Related: RHBZ#2021443- Add versioned dependency of samba-client-libs to ipa-server - Related: RHBZ#2021443- Hardening for CVE-2020-25717 - Harden processing of trusted domains' users in S4U operations - Resolves: RHBZ#2021443- Hardening for CVE-2020-25717 - Rebuild against samba-4.14.5-11.el8 - Resolves: RHBZ#2021443- Hardening for CVE-2020-25717 - Related: RHBZ#2019668- ipatests: NAMED_CRYPTO_POLICY_FILE not defined for RHEL Resolves: RHBZ#1982956- man page: update ipa-server-upgrade.1 Resolves: RHBZ#1973273 - Fall back to krbprincipalname when validating host auth indicators Resolves: RHBZ#1979625 - Add dependency for sssd-winbind-idmap to server-trust-ad Resolves: RHBZ#1982211- IPA server in debug mode fails to run because time.perf_counter_ns is Python 3.7+ Resolves: RHBZ#1974822 - Add checks to prevent assigning authentication indicators to internal IPA services Resolves: RHBZ#1979625 - Unable to set ipaUserAuthType with stageuser-add Resolves: RHBZ#1979605- Upstream release FreeIPA 4.9.6 Related: RHBZ#1945038 - Revise PKINIT upgrade code Resolves: RHBZ#1886837 - ipa-cert-fix man page: add note about certmonger renewal Resolves: RHBZ#1780317 - Certificate Serial Number issue Resolves: RHBZ#1919384- Upstream release FreeIPA 4.9.5 Related: RHBZ#1945038 - IPA to allow setting a new range type Resolves: RHBZ#1688267 - ipa-server-install displays debug output when --debug output is not specified. Resolves: RHBZ#1943151 - ACME fails to generate a cert on migrated RHEL8.4 server Resolves: RHBZ#1934991 - Switch ipa-client to use the JSON API Resolves: RHBZ#1937856 - IDM - Allow specifying permanent logging settings for BIND Resolves: RHBZ#1951511 - Cache LDAP data within a request Resolves: RHBZ#1953656 - ipa-server-upgrade is failing while upgrading rhel8.3 to rhel8.4 Resolves: RHBZ#1957768- Upstream release FreeIPA 4.9.3 Resolves: RHBZ#1945038- Upstream release FreeIPA 4.9.2 Related: RHBZ#1891832- Upstream release FreeIPA 4.9.1 Related: RHBZ#1891832- Upstream final release FreeIPA 4.9.0 Related: RHBZ#1891832- Upstream pre release FreeIPA 4.9.0rc3 Related: RHBZ#1891832- Remove ipa-server dependency from ipa-selinux subpackage - Related: RHBZ#1891832- Upstream pre release FreeIPA 4.9.0rc2 Related: RHBZ#1891832 - Synchronize spec file with upstream and Fedora Related: RHBZ#1891832 - Traceback while doing ipa-backup Resolves: RHBZ#1901068 - ipa-client-install changes system wide ssh configuration Resolves: RRBZ#1544379 - ipa-kdb: support subordinate/superior UPN suffixes Resolves: RHBZ#1891056 - KRA Transport and Storage Certificates do not renew Resolves: RHBZ#1872603 - Move where the restore state is marked during IPA server upgrade Resolves: RHBZ#1569011 - Intermittent IdM Client Registration Failures Resolves: RHBZ#1812871 - Nightly test failure in test_acme.py::TestACME::test_third_party_certs (updates-testing) Resolves: RHBZ#1903025 - Add IPA RA Agent to ACME group on the CA Resolves: RHBZ#1902727- Fix requirement for python3-kdcproxy, add no autoreqprov for ipatests sub package Related: RHBZ#1891832- Upstream pre release FreeIPA 4.9.0rc1 Resolves: RHBZ#1891832 - Requirements and design for libpwquality integration Resolves: RHBZ#1340463 - When parsing options require name/value pairs Resolves: RHBZ#1357495 - WebUI: Fix issue with opening links in new tab/window Resolves: RHBZ#1484088 - Use a state to determine if a 389-ds upgrade is in progress Resolves: RHBZ#1569011 - Unlock user accounts after a password reset and replicate that unlock to all IdM servers Resolves: RHBZ#1784657 - Set the certmonger subject with a string, not an object Resolves: RHBZ#1810148 - Implement ACME certificate enrolment Resolves: RHBZ#1851835 - [WebUI] Backport jQuery patches from newer versions of the library (e.g. 3.5.0) Resolves: RHBZ#1859249 - It is not possible to edit KDC database when the FreeIPA server is running Resolves: RHBZ#1875001 - Fix nsslapd-db-lock tuning of BDB backend Resolves: RHBZ#1882340 - ipa-kdb: support subordinate/superior UPN suffixes Resolves: RHBZ#1891056 - wgi/plugins.py: ignore empty plugin directories Resolves: RHBZ#1894800- SELinux Policy: let custodia replicate keys Resolves: RHBZ#1868432- Set mode of /etc/ipa/ca.crt to 0644 in CA-less installations Resolves: RHBZ#1870202- CAless installation: set the perms on KDC cert file Resolves: RHBZ#1863616 - EPN: handle empty attributes Resolves: RHBZ#1866938 - IPA-EPN: enhance input validation Resolves: RHBZ#1866291 - EPN: enhance input validation Resolves: RHBZ#1863079 - Require new samba build 4.12.3-52 Related: RHBZ#1868558 - Require new selinux-policy build 3.14.3-52 Related: RHBZ#1869311- [WebUI] IPA Error 3007: RequirmentError" while adding members in "User ID overrides" tab (updated) Resolves: RHBZ#1757045 - ipa-client-install: use the authselect backup during uninstall Resolves: RHBZ#1810179 - Replace SSLCertVerificationError with CertificateError for py36 Resolves: RHBZ#1858318 - Fix AVC denial during ipa-adtrust-install --add-agents Resolves: RHBZ#1859213- replica install failing with avc denial for custodia component Resolves: RHBZ#1857157- selinux don't audit rules deny fetching trust topology Resolves: RHBZ#1845596 - fix iPAddress cert issuance for >1 host/service Resolves: RHBZ#1846352 - Specify cert_paths when calling PKIConnection Resolves: RHBZ#1849155 - Update crypto policy to allow AD-SUPPORT when installing IPA Resolves: RHBZ#1851139 - Add version to ipa-idoverride-memberof obsoletes Related: RHBZ#1846434- Add missing ipa-selinux package Resolves: RHBZ#1853263- Remove client-epn left over files for ONLY_CLIENT Related: RHBZ#1847999- [WebUI] IPA Error 3007: RequirmentError" while adding members in "User ID overrides" tab Resolves: RHBZ#1757045 - EPN does not ship its default configuration ( /etc/ipa/epn.conf ) in freeipa-client-epn Resolves: RHBZ#1847999 - FreeIPA - Utilize 256-bit AJP connector passwords Resolves: RHBZ#1849914 - ipa: typo issue in ipanthomedirectoryrive deffinition Resolves: RHBZ#1851411- Remove ipa-idoverride-memberof as superceded by ipa-server 4.8.7 Resolves: RHBZ#1846434- Upstream release FreeIPA 4.8.7 - Require new samba build 4.12.3-0 Related: RHBZ#1818765 - New client-epn sub package Resolves: RHBZ#913799- Support krb5 1.18 Resolves: RHBZ#1817579- Upstream release FreeIPA 4.8.6 - New SELinux sub package to provide own module - Depend on selinux-policy-devel 3.14.3-43 for build due to a makefile issue in SELinux external policy support Related: RHBZ#1818765- Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit Resolves: RHBZ#1790663- Fixed weekday in 4.8.4-2 changelog date Related: RHBZ#1784003 - adtrust: print DNS records for external DNS case after role is enabled Resolves: RHBZ#1665051 - AD user without override receive InternalServerError with API Resolves: RHBZ#1782572 - ipa-client-automount fails after repeated installation/uninstallation Resolves: RHBZ#1790886 - install/updates: move external members past schema compat update Resolves: RHBZ#1803165 - kdb: make sure audit_as_req callback signature change is preserved Resolves: RHBZ#1803786- Update dependencies for samba, 389-ds and sssd Resolves: RHBZ#1792848- Depend on krb5-kdb-version-devel for BuildRequires - Update nss dependency to 3.44.0-4 - Reset per-indicator Kebreros policy Resolves: RHBZ#1784761- DNS install check: Fix overlapping DNS zone from the master itself Resolves: RHBZ#1784003- Rebase to upstream release 4.8.4 - Removed upstream patches 0001 to 0008 that are part of version 4.8.3-3 Resolves: RHBZ#1782658 Resolves: RHBZ#1782169 Resolves: RHBZ#1783046 Related: RHBZ#1748987- Fix otptoken_sync plugin Resolves: RHBZ#1777811- Use default crypto policy for TLS and enable TLS 1.3 support Resolves: RHBZ#1777809 - Covscan fixes Resolves: RHBZ#1777920 - Change pki_version to 10.8.0 Related: RHBZ#1748987- Rebase to security release 4.8.3 (CVE-2019-14867, CVE-2019-10195) Resolves: RHBZ#1767304 Resolves: RHBZ#1776939 - Support KDC ticket policies for authentication indicators Resolves: RHBZ#1777564- CVE-2019-14867: Denial of service in IPA server due to wrong use of ber_scanf() Resolves: RHBZ#1767304 - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch Resolves: RHBZ#1776939- Use default ssh host key algorithms Resolves: RHBZ#1756432 - Do not run trust upgrade code if master lacks Samba bindings Resolves: RHBZ#1757064 - Finish group membership management UI Resolves: RHBZ#1773528- Update dependency for bind-dndb-ldap to 11.2-2 Related: RHBZ#1762813- Rebase to upstream release 4.8.2 - Removed upstream patches 0001 to 0010 that are part of version 4.8.2 - Updated branding patch Resolves: RHBZ#1748987- Fix automount behavior with authselect Resolves: RHBZ#1740167- extdom: unify error code handling especially LDAP_NO_SUCH_OBJECT Resolves: RHBZ#1741530- FreeIPA 4.8.0 tarball lacks two update files that are in git Resolves: RHBZ#1741170- Allow insecure binds for migration Resolves: RHBZ#1731963- Fix --external-ca-profile not passed to CSR Resolves: RHBZ#1731813- Remove posixAccount from service_find search filter Resolves: RHBZ#1731437 - Fix repeated uninstallation of ipa-client-samba crashes Resolves: RHBZ#1732529 - WebUI: Add PKINIT status field to 'Configuration' page Resolves: RHBZ#1518153- Fix krb5-kdb-server -> krb5-kdb-version Related: RHBZ#1700121- Make sure ipa-server depends on krb5-kdb-version to pick up right MIT Kerberos KDB ABI Related: RHBZ#1700121 - User field separator uses '$$' within ipaSELInuxUserMapOrder Fixes: RHBZ#1729099- Fixed kdcproxy_version to 0.4-3 - Fixed krb5_version to 1.17-7 Related: RHBZ#1684528- New upstream release 4.8.0 - New subpackage: freeipa-client-samba - Added command ipa-cert-fix with man page - New sysconfdir sysconfig/certmonger - Updated pki_version, certmonger_version, sssd_version and kdcproxy_version Related: RHBZ#1684528- Fix upgrade issue with AD trust when no trust yet established Fixes: RHBZ#1708874 Related: RHBZ#1684528- Require certmonger 0.79.7-1 Related: RHBZ#1708095- Update to 4.7.90-pre1 Related: RHBZ#1684528 - Removed patches 0002 to 0031 as these are upsteram and part of 4.7.90-pre1 - Added new patches 0001-revert-minssf-defaults.patch and 0001-Correct-default-fontawesome-path-broken-by-da2cf1c5.patch- Remove strict dependencies to krb5-server version in order to allow update of krb5 to 1.17 and change dependency to KDB DAL version. Resolves: RHBZ#1700121- Handle NFS configuration file changes. nfs-utils moved the configuration file from /etc/sysconfig/nfs to /etc/nfs.conf. Resolves: RHBZ#1676981- Fix systemd-user HBAC rule Resolves: RHBZ#1664974- Resolve user/group names in idoverride*-find Resolves: RHBZ#1657745- Create systemd-user HBAC service and rule Resolves: RHBZ#1664974 - ipaserver/dcerpc: fix exclusion entry with a forest trust domain info returned Resolves: RHBZ#1664023- Fix misleading errors during client install rollback Resolves: RHBZ#1658283 - ipa-advise: update url of cacerdir_rehash tool Resolves: RHBZ#1658287 - Handle NTP configuration in a replica server installation Resolves: RHBZ#1651679 - Fix defects found by static analysis Resolves: RHBZ#1658182 - ipa-replica-install --setup-adtrust: check for package ipa-server-trust-ad Resolves: RHBZ#1658294 - ipaldap: invalid modlist when attribute encoding can vary Resolves: RHBZ#1658302 - Allow ipaapi and Apache user to access SSSD IFP Resolves: RHBZ#1639910 - Add sysadm_r to default SELinux user map order Resolves: RHBZ#1658303 - certdb: ensure non-empty Subject Key Identifier and validate server cert sig Resolves: RHBZ#1641988 - ipa-replica-install: password and admin-password options mutually exclusive Resolves: RHBZ#1658309 - ipa upgrade: handle double-encoded certificates Resolves: RHBZ#1658310 - PKINIT: fix ipa-pkinit-manage enable|disable Resolves: RHBZ#1658313 - Enable LDAP debug output in client to display TLS errors in join Resolves: RHBZ#1658316 - rpc: always read response Resolves: RHBZ#1639890 - ipa vault-retrieve: fix internal error Resolves: RHBZ#1658485 - Move ipa's systemd tmpfiles from /var/run to /run Resolves: RHBZ#1658487 - Fix authselect invocations to work with 1.0.2 Resolves: RHBZ#1654291 - ipa-client-automount and NFS unit name changes Resolves: RHBZ#1645501 - Fix compile issue with new 389-ds Resolves: RHBZ#1659448- Require platform-python-setuptools instead of python3-setuptools - Resolves: rhbz#1650139- Fixed: rhbz#1643445 - External CA step 2 fails with pki_client_database_dir is missing - Fixed: rhbz#1642834 - Smart card advise script uses hard-coded Python interpreter- Fix mapping of BUILTIN\Guests to 'nobody' group during upgrade to not use generated Samba config at this point - Related: rhbz#1623895- New command automember-find-orphans to find and remove orphan automemeber rules has been added Resolves: RHBZ#1638373 - Moved ipa/idm logos and background to redhat-logos-ipa-80.4: header-logo.png, login-screen-background.jpg, login-screen-logo.png, product-name.png New requirement to redhat-logos-ipa >= 80.4 in ipa-server-common Resolves: RHBZ#1626507- Move initialization of Guests mapping after cifs/ principal is created - Related: rhbz#1623895- 4.7.1 - Fixes: rhbz#1633105 - rebase to 4.7.1- Require the Python interpreter directly instead of using the package name - Related: rhbz#1619153- sudo rule for "admins" members should be created by default (#1609873)- ipaclient-install: chmod needs octal permissions (#1609880)- Resolves: #1609883 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound - Resolves: #1615765 do-not-use-RC4-in-FIPS-mode - Move fips_enabled to a common library to share across different plugins - ipasam: do not use RC4 in FIPS mode- Resolves: #1614301 Remove --no-sssd and --noac options - Resolves: #1613879 Disable Domain Level 0 - New patch sets to disable domain level 0 - New adapted patch to disable DL0 specific tests (pytest_ipa vs. pytest_plugins) - Adapted branding patch in ipa-replica-install.1 due to DL0 removal- Require 389-ds-base-legacy-tools for setup tools- Update to upstream 4.7.0 GA- Set krb5 DAL version to 7.0 (#1580711) - Rebuild aclocal and configure during build- Update to upstream 4.6.90.pre1- Use java-1.8.0-openjdk-devel- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree. - ldap: limit the retro changelog to dns subtree - Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead of "CA:FALSE" IPA CA CSR - Include the CA basic constraint in CSRs when renewing a CA - Resolves: #1493145 ipa-replica-install might fail because of an already existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX - Checks if replica-s4u2proxy.ldif should be applied - Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default - ds: ignore time skew during initial replication step - ipa-replica-manage: implicitly ignore initial time skew in force-sync - Resolves: #1500218 Replica installation at domain-level 0 fails against upgraded ipa-server - Fix ipa-replica-conncheck when called with --principal - Resolves: #1506188 server-del doesn't remove dns-server configuration from ldap- Drop workaround for building on AArch64 (#1482244) - Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)- Resolves: #1461177 ipa-otptoken-import - XML file is missing PBKDF2 parameters! - Resolves: #1464205 NULL LDAP context in call to ldap_search_ext_s during search in cn=ad, cn=trusts,dc=example,dc=com - Resolves: #1467887 iommu platform support for ipxe - Resolves: #1477178 [ipa-replica-install] - 406 Client Error: Failed to validate message: Incorrect number of results (0) searching forpublic key for host - Resolves: #1478251 IPA WebUI does not work after upgrade from IPA 4.4 to 4.5 - Resolves: #1480102 ipa-server-upgrade failes with "This entry already exists" - Resolves: #1482802 Unable to set ca renewal master on replica - Resolves: #1484428 Updating from RHEL 7.3 fails with Server-Cert not found (ipa-server-upgrade) - Resolves: #1484826 FreeIPA/IdM installations which were upgraded from versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and thus startup of Web UI fails - Resolves: #1486283 TypeError in renew_ca_cert prevents from swiching back to self-signed CA - Resolves: #1469246 Replica install fails to configure IPA-specific temporary files/directories - Resolves: #1469480 bind package is not automatically updated during ipa-server upgrade process - Resolves: #1475238 Use CommonNameToSANDefault in default profile (new installs only) - Resolves: #1477703 IPA upgrade fails for latest ipa package- Use OpenJDK 8 to bootstrap on AArch64 until RH1482244 is resolved in buildroot - Resolves: #1470177 - Rebase IPA to latest 4.5.x version - Resolves: #1398594 ipa topologysuffix-verify should only warn about maximum number of replication agreements. - Resolves: #1404236 Web UI: Change "Host Based" and "Role Based" to "Host-Based" and "Role-Based" - Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running - Resolves: #1451576 ipa cert-request failed to generate certificate from csr - Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values - Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page - Resolves: #1463186 IPA shouldn't allow objectclass if not all in lower case - Resolves: #1478322 user-show command fails when sizelimit is configured to number <= number of entity which is user member of - Resolves: #1496775 Enterprise principals should be able to trigger a refresh of the trusted domain data in the KDC - Resolves: #1502533 Changing cert-find to go through the proxy instead of using the port 8080 - Resolves: #1502663 pkinit-status command fails after an upgrade from a pre-4.5 IPA - Resolves: #1498168 Error when trying to modify a PTR record - Resolves: #1457876 ipa-backup fails silently - Resolves: #1493531 In case full PKINIT configuration is failing during server/replica install the error message should be more meaningful. - Resolves: #1449985 Suggest CA installation command in KRA installation warning- Resolves: #1477367 ipa-server-upgrade timeouts on wait_for_open ports expecting IPA services listening on IPv6 ports - Make sure upgrade also checks for IPv6 stack - control logging of host_port_open from caller - log progress of wait_for_open_ports - Resolves: #1477243 ipa help command returns traceback when no cache is present - Store help in Schema before writing to disk - Disable pylint in get_help function because of type confusion.- Resolves: #1477178 - [ipa-replica-install] - 406 Client Error: Failed to validate message: Incorrect number of results (0) searching forpublic key for host - Always check peer has keys before connecting - Resolves: #1482802 - Unable to set ca renewal master on replica - Fix ipa config-mod --ca-renewal-master - Resolves: #1486283 - TypeError in renew_ca_cert prevents from swiching back to self-signed CA - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca) - Resolves: #1480102 - ipa-server-upgrade failes with "This entry already exists" - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists - Resolves: #1484826 - FreeIPA/IdM installations which were upgraded from versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and thus startup of Web UI fails - Adds whoami DS plugin in case that plugin is missing - Resolves: #1478251 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5 - Fixing how sssd.conf is updated when promoting a client to replica - Resolves: #1461177 - ipa-otptoken-import - XML file is missing PBKDF2 parameters! - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace - Resolves: #1484428 - Updating from RHEL 7.3 fails with Server-Cert not found (ipa-server-upgrade) - Backport 4-5: Fix ipa-server-upgrade with server cert tracking- Resolves: #1477703 IPA upgrade fails for latest ipa package - Restore old version of caIPAserviceCert for upgrade only- Resolves: #1475238 Use CommonNameToSANDefault in default profile (new installs only) - Restore old version of caIPAserviceCert for upgrade only- Resolves: #1455946 Provide a tooling automating the configuration of Smart Card authentication on a FreeIPA master - smart-card advises: configure systemwide NSS DB also on master - smart-card advises: add steps to store smart card signing CA cert - Allow to pass in multiple CA cert paths to the smart card advises - add a class that tracks the indentation in the generated advises - delegate the indentation handling in advises to dedicated class - advise: add an infrastructure for formatting Bash compound statements - delegate formatting of compound Bash statements to dedicated classes - Fix indentation of statements in Smart card advises - Use the compound statement formatting API for configuring PKINIT - smart card advises: use a wrapper around Bash `for` loops - smart card advise: use password when changing trust flags on HTTP cert - smart-card-advises: ensure that krb5-pkinit is installed on client - Resolves: #1475238 Use CommonNameToSANDefault in default profile (new installs only) - Add CommonNameToSANDefault to default cert profile - Resolves: #1464205 NULL LDAP context in call to ldap_search_ext_s during search in cn=ad,cn=trusts,dc=example,dc=com - NULL LDAP context in call to ldap_search_ext_s during search- Resolves: #1469246 Replica install fails to configure IPA-specific temporary files/directories - replica install: drop-in IPA specific config to tmpfiles.d - Resolves: #1469480 bind package is not automatically updated during ipa-server upgrade process - Bumped Required version of bind-dyndb-ldap and bind package- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI - Make sure we check ccaches in all rpcserver paths- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL internal error, assertion failed: Digest MD4 forbidden in FIPS mode! - ipa-sam: replace encode_nt_key() with E_md4hash() - ipa_pwd_extop: do not generate NT hashes in FIPS mode - Resolves: #1377973 ipa-server-install fails when the provided or resolved IP address is not found on local interfaces - Fix local IP address validation - ipa-dns-install: remove check for local ip address - refactor CheckedIPAddress class - CheckedIPAddress: remove match_local param - Remove ip_netmask from option parser - replica install: add missing check for non-local IP address - Remove network and broadcast address warnings- Resolves: #1449189 ipa-kra-install timeouts on replica - kra: promote: Get ticket before calling custodia- Resolve: #1455946 Provide a tooling automating the configuration of Smart Card authentication on a FreeIPA master - server certinstall: update KDC master entry - pkinit manage: introduce ipa-pkinit-manage - server upgrade: do not enable PKINIT by default - Extend the advice printing code by some useful abstractions - Prepare advise plugin for smart card auth configuration - Resolve: #1461053 allow to modify list of UPNs of a trusted forest - trust-mod: allow modifying list of UPNs of a trusted forest - WebUI: add support for changing trust UPN suffixes- Resolves: #1377973 ipa-server-install fails when the provided or resolved IP address is not found on local interfaces - Only warn when specified server IP addresses don't match intf - Resolves: #1438016 gssapi errors after IPA server upgrade - Bump version of python-gssapi - Resolves: #1457942 certauth: use canonical principal for lookups - ipa-kdb: use canonical principal in certauth plugin - Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid breaking older clients - Add code to be able to set default kinit lifetime - Revert setting sessionMaxAge for old clients- Resolves: #1442233 IPA client commands fail when pointing to replica - httpinstance: wait until the service entry is replicated - Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then not indexed - Fix index definition for ipaAnchorUUID - Resolves: #1438016 gssapi errors after IPA server upgrade - Avoid possible endless recursion in RPC call - rpc: preparations for recursion fix - rpc: avoid possible recursion in create_connection - Resolves: #1446087 services entries missing krbCanonicalName attribute. - Changing cert-find to do not use only primary key to search in LDAP. - Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers - ipa-kdb: reload certificate mapping rules periodically - Resolves: #1455541 after upgrade login from web ui breaks - kdc.key should not be visible to all - Resolves: #1435606 Add pkinit_indicator option to KDC configuration - ipa-kdb: add pkinit authentication indicator in case of a successful certauth - Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate issuance when ipa-ca records are not resolvable - Turn off OCSP check - Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 - server_del - TypeError: 'NoneType' object is not iterable - fix incorrect suffix handling in topology checks- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to handle PKINIT certificates/anchors - certdb: add named trust flag constants - certdb, certs: make trust flags argument mandatory - certdb: use custom object for trust flags - install: trust IPA CA for PKINIT - client install: fix client PKINIT configuration - install: introduce generic Kerberos Augeas lens - server install: fix KDC PKINIT configuration - ipapython.ipautil.run: Add option to set umask before executing command - certs: do not export keys world-readable in install_key_from_p12 - certs: do not export CA certs in install_pem_from_p12 - server install: fix KDC certificate validation in CA-less - replica install: respect --pkinit-cert-file - cacert manage: support PKINIT - server certinstall: support PKINIT - Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file option - certs: do not export CA certs in install_pem_from_p12 - server install: fix KDC certificate validation in CA-less - Resolves: #1451228 ipa-kra-install fails when primary KRA server has been decommissioned - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname - Resolves: #1451712 KRA installation fails on server that was originally installed as CA-less - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt - Resolves: #1441499 ipa cert-show does not raise error if no file name specified - ca/cert-show: check certificate_out in options - Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+ - Remove pkinit-anonymous command - Resolves: #1449523 Provide an API command to retrieve PKINIT status in the FreeIPA topology - Allow for multivalued server attributes - Refactor the role/attribute member reporting code - Add an attribute reporting client PKINIT-capable servers - Add the list of PKINIT servers as a virtual attribute to global config - Add `pkinit-status` command - test_serverroles: Get rid of MockLDAP and use ldap2 instead - Resolves: #1452216 Replica installation grants HTTP principal access in WebUI - Fix rare race condition with missing ccache file - Resolves: #1455045 Simple service uninstallers must be able to handle missing service files gracefully - only stop/disable simple service if it is installed - Resolves: #1455541 after upgrade login from web ui breaks - krb5: make sure KDC certificate is readable - Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing command "ipa cert-request --add" after upgrade - Change python-cryptography to python2-cryptography- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'" error observed during ipa upgrade with latest package. - ipa-server-install: fix uninstall - Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break replica - ca install: merge duplicated code for DM password - installutils: add DM password validator - ca, kra install: validate DM password- Resolves: #1447284 Upgrade from ipa-4.1 fails when enabling KDC proxy - python2-ipalib: add missing python dependency - installer service: fix typo in service entry - upgrade: add missing suffix to http instance - Resolves: #1444791 Update man page of ipa-kra-install - ipa-kra-install manpage: document domain-level 1 - Resolves: #1441493 ipa cert-show raises stack traces when --certificate-out=/tmp - cert-show: writable files does not mean dirs - Resolves: #1441192 Add the name of URL parameter which will be check for username during cert login - Bump version of ipa.conf file - Resolves: #1378797 Web UI must check OCSP and CRL during smartcard login - Turn on NSSOCSP check in mod_nss conf - Resolves: #1322963 Errors from AD when trying to sign ipa.csr, conflicting template on - renew agent: respect CA renewal master setting - server upgrade: always fix certmonger tracking request - cainstance: use correct profile for lightweight CA certificates - renew agent: allow reusing existing certs - renew agent: always export CSR on IPA CA certificate renewal - renew agent: get rid of virtual profiles - ipa-cacert-manage: add --external-ca-type - Resolves: #1441593 error adding authenticator indicators to host - Fixing adding authenticator indicators to host - Resolves: #1449525 Set directory ownership in spec file - Added plugins directory to ipaclient subpackages - ipaclient: fix missing RPM ownership - Resolves: #1451279 otptoken-add-yubikey KeyError: 'ipatokenotpdigits' - otptoken-add-yubikey: When --digits not provided use default value- Resolves: #1449189 ipa-kra-install timeouts on replica - ipa-kra-install: fix check_host_keys- Resolves: #1438833 [ipa-replica-install] - 406 Client Error: Failed to validate message: Incorrect number of results (0) searching forpublic key for host - Make sure remote hosts have our keys - Resolves: #1442815 Replica install fails during migration from older IPA master - Refresh Dogtag RestClient.ca_host property - Remove the cachedproperty class - Resolves: #1444787 Update warning message when KRA installation fails - kra install: update installation failure message - Resolves: #1444896 ipa-server-install with external-ca fails in FIPS mode - ipa-server-install with external CA: fix pkinit cert issuance - Resolves: #1445397 GET in KerberosSession.finalize_kerberos_acquisition() must use FreeIPA CA - kerberos session: use CA cert with full cert chain for obtaining cookie - Resolves: #1447375 ipa-client-install: extra space in pkinit_anchors definition - ipa-client-install: remove extra space in pkinit_anchors definition - Resolves: #1447703 Fix SELinux contex of http.keytab during upgrade - Use proper SELinux context with http.keytab- Resolves: #1200767 [RFE] Allow Kerberos authentication for users with certificates on smart cards (pkinit) - spec file: bump krb5 Requires for certauth fixes - Resolves: #1438729 Configure local PKINIT on DL0 or when '--no-pkinit' option is used - separate function to set ipaConfigString values on service entry - Allow for configuration of all three PKINIT variants when deploying KDC - API for retrieval of master's PKINIT status and publishing it in LDAP - Use only anonymous PKINIT to fetch armor ccache - Stop requesting anonymous keytab and purge all references of it - Use local anchor when armoring password requests - Upgrade: configure local/full PKINIT depending on the master status - Do not test anonymous PKINIT after install/upgrade - Resolves: #1442427 ipa.ipaserver.install.plugins.adtrust. update_tdo_gidnumber: ERROR Default SMB Group not found - upgrade: adtrust update_tdo_gidnumber plugin must check if adtrust is installed - Resolves: #1442932 ipa restore fails to restore IPA user - restore: restart/reload gssproxy after restore - Resolves: #1444896 ipa-server-install with external-ca fails in FIPS mode - Fix CA/server cert validation in FIPS - Resolves: #1444947 Deadlock between topology and schema-compat plugins - compat-manage: behave the same for all users - Move the compat plugin setup at the end of install - compat: ignore cn=topology,cn=ipa,cn=etc subtree - Resolves: #1445358 ipa vault-add raises TypeError - vault: piped input for ipa vault-add fails - Resolves: #1445382 ipa vault-retrieve fails to retrieve data from vault - Vault: Explicitly default to 3DES CBC - Resolves: #1445432 uninstall ipa client automount failed with RuntimeWarning - automount install: fix checking of SSSD functionality on uninstall - Resolves: #1446137 pki_client_database_password is shown in ipaserver-install.log - Hide PKI Client database password in log file- Resolves: #1443869 Command "openssl pkcs12 ..." failed during IPA upgrade - Fix CAInstance.import_ra_cert for empty passwords- Resolves: #1431520 ipa cert-find runs a large number of searches, so IPA WebUI is slow to display user details page - cert: defer cert-find result post-processing - Resolves: #1435611 Tracebacks seen from dogtag-ipa-ca-renew-agent-submit helper when installing replica - server-install: No double Kerberos install - Resolves: #1437502 ipa-replica-install fails with requirement to use --force-join that is a client install option. - Add the force-join option to replica install - replicainstall: better client install exception handling - Resolves: #1437953 Server CA-less impossible option check - server-install: remove broken no-pkinit check - Resolves: #1441160 FreeIPA client <= 4.4 fail to parse 4.5 cookies - Add debug log in case cookie retrieval went wrong - Resolves: #1441548 ipa server install fails with --external-ca option - ext. CA: correctly write the cert chain - Resolves: #1441718 Conversion of CA-less server to CA fails on CA instance spawn - Fix CA-less to CA-full upgrade - Resolves: #1442133 Do not link libkrad, liblber, libldap_r and libsss_nss_idmap to every binary in IPA - configure: fix AC_CHECK_LIB usage - Resolves: #1442815 Replica install fails during migration from older IPA master - Fix RA cert import during DL0 replication - Related: #1442004 Building IdM/FreeIPA internally on all architectures - filtering unsupported packages - Build all subpackages on all architectures- Resolves: #1382053 Need to have validation for idrange names - idrange-add: properly handle empty --dom-name option - Resolves: #1435611 Tracebacks seen from dogtag-ipa-ca-renew-agent-submit helper when installing replica - dsinstance: reconnect ldap2 after DS is restarted by certmonger - httpinstance: avoid httpd restart during certificate request - dsinstance, httpinstance: consolidate certificate request code - install: request service certs after host keytab is set up - renew agent: revert to host keytab authentication - renew agent, restart scripts: connect to LDAP after kinit - Resolves: #1436987 ipasam: gidNumber attribute is not created in the trusted domain entry - ipa-sam: create the gidNumber attribute in the trusted domain entry - Upgrade: add gidnumber to trusted domain entry - Resolves: #1438679 [ipa-replica-install] - IncorrectPasswordException: Incorrect client security database password - Add pki_pin only when needed - Resolves: #1438348 Console output message while adding trust should be mapped with texts changed in Samba. - ipaserver/dcerpc: unify error processing - Resolves: #1438366 ipa trust-fetch-domains: ValidationError: invalid 'Credentials': Missing credentials for cross-forest communication - trust: always use oddjobd helper for fetching trust information - Resolves: #1441192 Add the name of URL parameter which will be check for username during cert login - WebUI: cert login: Configure name of parameter used to pass username - Resolves: #1437879 [copr] Replica install failing - Create system users for FreeIPA services during package installation - Resolves: #1441316 WebUI cert auth fails after ipa-adtrust-install - Fix s4u2self with adtrust- Resolves: #1318186 Misleading error message during external-ca IPA master install - httpinstance: make sure NSS database is backed up - Resolves: #1331443 Re-installing ipa-server after uninstall fails with "ERROR CA certificate chain in ... incomplete" - httpinstance: make sure NSS database is backed up - Resolves: #1393726 Enumerate all available request type options in ipa cert-request help - Hide request_type doc string in cert-request help - Resolves: #1402959 [RFE] Universal Smart Card to Identity mapping - spec file: bump libsss_nss_idmap-devel BuildRequires - server: make sure we test for sss_nss_getlistbycert - Resolves: #1437378 ipa-adtrust-install produced an error and failed on starting smb when hostname is not FQDN - adtrust: make sure that runtime hostname result is consistent with the configuration - Resolves: #1437555 ipa-replica-install with DL0 fails to get annonymous keytab - Always check and create anonymous principal during KDC install - Remove duplicate functionality in upgrade - Resolves: #1437946 Upgrade to FreeIPA 4.5.0 does not configure anonymous principal for PKINIT - Upgrade: configure PKINIT after adding anonymous principal - Remove unused variable from failed anonymous PKINIT handling - Split out anonymous PKINIT test to a separate method - Ensure KDC is propery configured after upgrade - Resolves: #1437951 Remove pkinit-related options from server/replica-install on DL0 - Fix the order of cert-files check - Don't allow setting pkinit-related options on DL0 - replica-prepare man: remove pkinit option refs - Remove redundant option check for cert files - Resolves: #1438490 CA-less installation fails on publishing CA certificate - Get correct CA cert nickname in CA-less - Remove publish_ca_cert() method from NSSDatabase - Resolves: #1438838 Avoid arch-specific path in /etc/krb5.conf.d/ipa-certmap - IPA-KDB: use relative path in ipa-certmap config snippet - Resolves: #1439038 Allow erasing ipaDomainResolutionOrder attribute - Allow erasing ipaDomainResolutionOrder attribute- Resolves: #1434032 Run ipa-custodia with custom SELinux context - Require correct custodia version- Resolves: #800545 [RFE] Support SUDO command rename - Reworked the renaming mechanism - Allow renaming of the sudorule objects - Resolves: #872671 IPA WebUI login for AD Trusted User fails - WebUI: check principals in lowercase - WebUI: add method for disabling item in user dropdown menu - WebUI: Add support for login for AD users - Resolves: #1200767 [RFE] Allow Kerberos authentication for users with certificates on smart cards (pkinit) - ipa-kdb: add ipadb_fetch_principals_with_extra_filter() - IPA certauth plugin - ipa-kdb: do not depend on certauth_plugin.h - spec file: bump krb5-devel BuildRequires for certauth - Resolves: #1264370 RFE: disable last successful authentication by default in ipa. - Set "KDC:Disable Last Success" by default - Resolves: #1318186 Misleading error message during external-ca IPA master install - certs: do not implicitly create DS pin.txt - httpinstance: clean up /etc/httpd/alias on uninstall - Resolves: #1331443 Re-installing ipa-server after uninstall fails with "ERROR CA certificate chain in ... incomplete" - certs: do not implicitly create DS pin.txt - httpinstance: clean up /etc/httpd/alias on uninstall - Resolves: #1366572 [RFE] Web UI: allow Smart Card authentication - configure: fix --disable-server with certauth plugin - rpcserver.login_x509: Actually return reply from __call__ method - spec file: Bump requires to make Certificate Login in WebUI work - Resolves: #1402959 [RFE] Universal Smart Card to Identity mapping - extdom: do reverse search for domain separator - extdom: improve cert request - Resolves: #1430363 [RFE] HBAC rule names command rename - Reworked the renaming mechanism - Allow renaming of the HBAC rule objects - Resolves: #1433082 systemctl daemon-reload needs to be called after httpd.service.d/ipa.conf is manipulated - tasks: run `systemctl daemon-reload` after httpd.service.d updates - Resolves: #1434032 Run ipa-custodia with custom SELinux context - Use Custodia 0.3.1 features - Resolves: #1434384 RPC client should use HTTP persistent connection - Use connection keep-alive - Add debug logging for keep-alive - Increase Apache HTTPD's default keep alive timeout - Resolves: #1434729 man ipa-cacert-manage install needs clarification - man ipa-cacert-manage install needs clarification - Resolves: #1434910 replica install against IPA v3 master fails with ACIError - Fixing replica install: fix ldap connection in domlvl 0 - Resolves: #1435394 Ipa-kra-install fails with weird output when backspace is used during typing Directory Manager password - ipapython.ipautil.nolog_replace: Do not replace empty value - Resolves: #1435397 ipa-replica-install can't install replica file produced by ipa-replica-prepare on 4.5 - replica prepare: fix wrong IPA CA nickname in replica file - Resolves: #1435599 WebUI: in self-service Vault menu item is shown even if KRA is not installed - WebUI: Fix showing vault in selfservice view - Resolves: #1435718 As a ID user I cannot call a command with --rights option - ldap2: use LDAP whoami operation to retrieve bind DN for current connection - Resolves: #1436319 "Truncated search results" pop-up appears in user details in WebUI - WebUI: Add support for suppressing warnings - WebUI: suppress truncation warning in select widget - Resolves: #1436333 Uninstall fails with No such file or directory: '/var/run/ipa/services.list' - Create temporaty directories at the begining of uninstall - Resolves: #1436334 WebUI: Adding certificate mapping data using certificate fails - WebUI: Allow to add certs to certmapping with CERT LINES around - Resolves: #1436338 CLI doesn't work after ipa-restore - Backup ipa-specific httpd unit-file - Backup CA cert from kerberos folder - Resolves: #1436342 Bump samba version, required for FIPS mode and privilege separation - Bump samba version for FIPS and priv. separation - Resolves: #1436642 [ipalib/rpc.py] - "maximum recursion depth exceeded" with ipa vault commands - Avoid growing FILE ccaches unnecessarily - Handle failed authentication via cookie - Work around issues fetching session data - Prevent churn on ccaches - Resolves: #1436657 Add workaround for pki_pin for FIPS - Generate PIN for PKI to help Dogtag in FIPS - Resolves: #1436714 [vault] cache KRA transport cert - Simplify KRA transport cert cache - Resolves: #1436723 cert-find does not find all certificates without sizelimit=0 - cert: do not limit internal searches in cert-find - Resolves: #1436724 Renewal of IPA RA fails on replica - dogtag-ipa-ca-renew-agent-submit: fix the is_replicated() function - Resolves: #1436753 Master tree fails to install - httpinstance.disable_system_trust: Don't fail if module 'Root Certs' is not available- Resolves: #1432630 python2-jinja2 needed for python2-ipaclient - Remove csrgen - Resolves: #1432903 Set GssProxy options to enable caching of ldap tickets - Add options to allow ticket caching- Resolves: #828866 [RFE] enhance --subject option for ipa-server-install - Resolves: #1160555 ipa-server-install: Cannot handle double hyphen "--" in hostname - Resolves: #1286288 Insufficient 'write' privilege to the 'ipaExternalMember' attribute - Resolves: #1321652 ipa-server-install fails when using external certificates that encapsulate RDN components in double quotes - Resolves: #1327207 ipa cert-revoke --help doesn't provide enough info on revocation reasons - Resolves: #1340880 ipa-server-install: improve prompt on interactive installation - Resolves: #1353841 ipa-replica-install fails to install when resolv.conf incomplete entries - Resolves: #1356104 cert-show command does not display Subject Alternative Names - Resolves: #1357511 Traceback message seen when ipa is provided with invalid configuration file name - Resolves: #1358752 ipa-ca-install fails on replica when IPA server is converted from CA-less to CA-full - Resolves: #1366572 [RFE] Web UI: allow Smart Card authentication - Resolves: #1367572 improve error message in ipa migrate-ds: mention ipa config-mod --enable-migration=TRUE - Resolves: #1367868 Add options to retrieve lightweight CA certificate/chain - Resolves: #1371927 Implement ca-enable/disable commands. - Resolves: #1372202 Add Users into User Group editors fails to show Full names - Resolves: #1373091 Adding an auth indicator from the CLI creates an extra check box in the UI - Resolves: #1375596 Ipa-server WebUI - long user/group name show wrong error message - Resolves: #1375905 "Normal" group type in the UI is confusing - Resolves: #1376040 IPA client ipv6 - invalid --ip-address shows traceback - Resolves: #1376630 IDM admin password gets written to /root/.dogtag/pki-tomcat/ca/pkcs12_password.conf - Resolves: #1376729 ipa-server-install script option --no_hbac_allow should match other options - Resolves: #1378461 IPA Allows Password Reuse with History value defined when admin resets the password. - Resolves: #1379029 conncheck failing intermittently during single step replica installs - Resolves: #1379858 [RFE] better debugging for ipa-replica-conncheck - Resolves: #1384310 ipa dnsrecord-add fails with Keyerror stack trace - Resolves: #1392778 Update man page for ipa-adtrust-install by removing --no-msdcs option - Resolves: #1392858 Rebase to FreeIPA 4.5+ - Rebase to 4.5.0 - Resolves: #1399133 Delete option shouldn't be available for hosts applied to view. - Resolves: #1399190 [RFE] Certificates issued by externally signed IdM CA should contain full trust chain - Resolves: #1400416 RFE: Provide option to take backup of IPA server before uninstalling IPA server - Resolves: #1400529 cert-request is not aware of Kerberos principal aliases - Resolves: #1401526 IPA WebUI certificates are grayed out on overview page but not on details page - Resolves: #1402959 [RFE] Universal Smart Card to Identity mapping - Resolves: #1404750 ipa-client-install fails to get CA cert via LDAP when non-FQDN name of IPA server is first in /etc/hosts - Resolves: #1409628 [RFE] Semi-automatic integration with external DNS using nsupdate - Resolves: #1413742 Backport request for bug/issue Change IP address validation errors to warnings - Resolves: #1415652 IPA replica install log shows password in plain text - Resolves: #1427897 different behavior regarding system wide certs in master and replica. - Resolves: #1430314 The ipa-managed-entries command failed, exception: AttributeError: ldap2- Resolves: #1419735 ipa-replica-install fails promotecustodia.create_replica with cert errors (untrusted) - added ssl verification using IPA trust anchor - Resolves: #1428472 batch param compatibility is incorrect - compat: fix `Any` params in `batch` and `dnsrecord` - Renamed patches 1011 and 1012 to 0159 and 0157, as they were merged upstream- Resolves: #1416454 replication race condition prevents IPA to install - wait_for_entry: use only DN as parameter - Wait until HTTPS principal entry is replicated to replica - Use proper logging for error messages- Resolves: #1365858 ipa-ca-install fails on replica when IPA Master is installed without CA - Set up DS TLS on replica in CA-less topology - Resolves: #1398600 IPA replica install fails with dirsrv errors. - Do not configure PKI ajp redirection to use "::1" - Resolves: #1413137 CVE-2017-2590 ipa: Insufficient permission check for ca-del, ca-disable and ca-enable commands - ca: correctly authorise ca-del, ca-enable and ca-disable- Resolves: #1370493 CVE-2016-7030 ipa: DoS attack against kerberized services by abusing password policy - ipa-kdb: search for password policies globally - Renamed patches 1011 and 1012 to 0151 and 0150, as they were merged upstream- Resolves: #1398670 Check IdM Topology for broken record caused by replication conflict before upgrading it - Check for conflict entries before raising domain level- Resolves: #1382812 Creation of replica for disconnected environment is failing with CA issuance errors; Need good steps. - gracefully handle setting replica bind dn group on old masters - Resolves: #1397439 ipa-ca-install on promoted replica hangs on creating a temporary CA admin - replication: ensure bind DN group check interval is set on replica config - add missing attribute to ipaca replica during CA topology update - Resolves: #1401088 IPA upgrade of replica without DNS fails during restart of named-pkcs11 - bindinstance: use data in named.conf to determine configuration status- Resolves: #1370493 CVE-2016-7030 ipa: DoS attack against kerberized services by abusing password policy - password policy: Add explicit default password policy for hosts and services - Resolves: #1395311 CVE-2016-9575 ipa: Insufficient permission check in certprofile-mod - certprofile-mod: correctly authorise config update- Resolves: #1378353 Replica install fails with old IPA master sometimes during replication process - spec file: bump minimal required version of 389-ds-base - Resolves: #1387779 Make httpd publish CA certificate on Domain Level 1 - Fix missing file that fails DL1 replica installation - Resolves: #1387782 WebUI: Services are not displayed correctly after upgrade - WebUI: services without canonical name are shown correctly - Resolves: #1389709 Traceback seen in error_log when trustdomain-del is run - trustdomain-del: fix the way how subdomain is searched- Resolves: #1318616 CA fails to start after doing ipa-ca-install --external-ca - Keep NSS trust flags of existing certificates - Resolves: #1360813 ipa-server-certinstall does not update all certificate stores and doesn't set proper trust permissions - Add cert checks in ipa-server-certinstall - Resolves: #1371479 cert-find --all does not show information about revocation - cert: add revocation reason back to cert-find output - Resolves: #1375133 WinSync users who have First.Last casing creates users who can have their password set - ipa passwd: use correct normalizer for user principals - Resolves: #1377858 Users with 2FA tokens are not able to login to IPA servers - Properly handle LDAP socket closures in ipa-otpd - Resolves: #1387779 Make httpd publish CA certificate on Domain Level 1 - Make httpd publish its CA certificate on DL1- Resolves: #1373910 IPA server upgrade fails with DNS timed out errors. - Resolves: #1375269 ipa trust-fetch-domains throws internal error- Resolves: #1373359 ipa-certupdate fails with "CA is not configured" - Fix regression introduced in ipa-certupdate- Resolves: #1355753 adding two way non transitive(external) trust displays internal error on the console - Always fetch forest info from root DCs when establishing two-way trust - factor out `populate_remote_domain` method into module-level function - Always fetch forest info from root DCs when establishing one-way trust - Resolves: #1356101 Lightweight sub-CA certs are not tracked by certmonger after `ipa-replica-install` - Track lightweight CAs on replica installation - Resolves: #1357488 ipa command stuck forever on higher versioned client with lower versioned server - compat: Save server's API version in for pre-schema servers - compat: Fix ping command call - schema cache: Store and check info for pre-schema servers - Resolves: #1363905 man page for ipa-replica-manage has a typo in -c flag - Fix man page ipa-replica-manage: remove duplicate -c option from --no-lookup - Resolves: #1367865 webui: cert_revoke should use --cacn to set correct CA when revoking certificate - cert: include CA name in cert command output - WebUI add support for sub-CAs while revoking certificates - Resolves: #1368424 Unable to view certificates issued by Sub CA in Web UI - Add support for additional options taken from table facet - WebUI: Fix showing certificates issued by sub-CA - Resolves: #1368557 dnsrecord-add does not prompt for missing record parts internactively - dns: normalize record type read interactively in dnsrecord_add - dns: prompt for missing record parts in CLI - dns: fix crash in interactive mode against old servers - Resolves: #1370519 Certificate revocation in service-del and host-del isn't aware of Sub CAs - cert: fix cert-find --certificate when the cert is not in LDAP - Make host/service cert revocation aware of lightweight CAs - Resolves: #1371901 Use OAEP padding with custodia - Use RSA-OAEP instead of RSA PKCS#1 v1.5 - Resolves: #1371915 When establishing external two-way trust, forest root Administrator account is used to fetch domain info - do not use trusted forest name to construct domain admin principal - Resolves: #1372597 Incorrect CA ACL evaluation of SAN DNS names in certificate request - Fix CA ACL Check on SubjectAltNames - Resolves: #1373272 CLI always sends default command version - cli: use full name when executing a command - Resolves: #1373359 ipa-certupdate fails with "CA is not configured" - Fix ipa-certupdate for CA-less installation - Resolves: #1373540 client-install with IPv6 address fails on link-local address (always) - Fix parse errors with link-local addresses- Resolves: #1081561 CA not start during ipa server install in pure IPv6 env - Fix ipa-server-install in pure IPv6 environment - Resolves: #1318169 Tree-root domains in a trusted AD forest aren't marked as reachable via the forest root - trust: make sure ID range is created for the child domain even if it exists - ipa-kdb: simplify trusted domain parent search - Resolves: #1335567 Update Warning in IdM Web UI API browser - WebUI: add API browser is tech preview warning - Resolves: #1348560 Mulitple domain Active Directory Trust conflict - ipaserver/dcerpc: reformat to make the code closer to pep8 - trust: automatically resolve DNS trust conflicts for triangle trusts - Resolves: #1351593 CVE-2016-5404 ipa: Insufficient privileges check in certificate revocation - cert-revoke: fix permission check bypass (CVE-2016-5404) - Resolves: #1353936 custodia.conf and server.keys file is world-readable. - Remove Custodia server keys from LDAP - Secure permissions of Custodia server.keys - Resolves: #1358752 ipa-ca-install fails on replica when IPA server is converted from CA-less to CA-full - custodia: include known CA certs in the PKCS#12 file for Dogtag - custodia: force reconnect before retrieving CA certs from LDAP - Resolves: #1362333 ipa vault container owner cannot add vault - Fix: container owner should be able to add vault - Resolves: #1365546 External trust with root domain is transitive - trust: make sure external trust topology is correctly rendered - Resolves: #1365572 IPA server broken after upgrade - Require pki-core-10.3.3-7 - Resolves: #1367864 Server assumes latest version of command instead of version 1 for old / 3rd party clients - rpcserver: assume version 1 for unversioned command calls - rpcserver: fix crash in XML-RPC system commands - Resolves: #1367773 thin client ignores locale change - schema cache: Fallback to 'en_us' when locale is not available - Resolves: #1368754 ipa server uninstall fails with Python "Global Name error" - Fail on topology disconnect/last role removal - Resolves: #1368981 ipa otptoken-add --type=hotp --key creates wrong OTP - otptoken, permission: Convert custom type parameters on server - Resolves: #1369414 ipa server-del fails with Python stack trace - Handled empty hostname in server-del command - Resolves: #1369761 ipa-server must depend on a version of httpd that support mod_proxy with UDS - Require httpd 2.4.6-31 with mod_proxy Unix socket support - Resolves: #1370512 Received ACIError instead of DuplicatedError in stageuser_tests - Raise DuplicatedEnrty error when user exists in delete_container - Resolves: #1371479 cert-find --all does not show information about revocation - cert: add missing param values to cert-find output - Renamed patch 1011 to 0100, as it was merged upstream- Resolves: #1298288 [RFE] Improve performance in large environments. - cert: speed up cert-find - Resolves: #1317379 [EXPERIMENTAL][RFE] Web UI: allow Smart Card authentication - service: add flag to allow S4U2Self - Add 'trusted to auth as user' checkbox - Added new authentication method - Resolves: #1353881 ipa-replica-install suggests about non-existent --force-ntpd option - Don't show --force-ntpd option in replica install - Resolves: #1354441 DNS forwarder check is too strict: unable to add sub-domain to already-broken domain - DNS: allow to add forward zone to already broken sub-domain - Resolves: #1356146 performance regression in CLI help - schema: Speed up schema cache - frontend: Change doc, summary, topic and NO_CLI to class properties - schema: Introduce schema cache format - schema: Generate bits for help load them on request - help: Do not create instances to get information about commands and topics - schema cache: Do not reset ServerInfo dirty flag - schema cache: Do not read fingerprint and format from cache - Access data for help separately - frontent: Add summary class property to CommandOverride - schema cache: Read server info only once - schema cache: Store API schema cache in memory - client: Do not create instance just to check isinstance - schema cache: Read schema instead of rewriting it when SchemaUpToDate - Resolves: #1360769 ipa-server-certinstall couldnt unlock private key file - server install: do not prompt for cert file PIN repeatedly - Resolves: #1364113 ipa-password: ipa: ERROR: RuntimeError: Unable to create cache directory: [Errno 13] Permission denied: '/home/test_user' - schema: Speed up schema cache - Resolves: #1366604 `cert-find` crashes on invalid certificate data - cert: do not crash on invalid data in cert-find - Resolves: #1366612 Middle replica uninstallation in line topology works without '--ignore-topology-disconnect' - Fail on topology disconnect/last role removal - Resolves: #1366626 caacl-add-service: incorrect error message when service does not exists - Fix ipa-caalc-add-service error message - Resolves: #1367022 The ipa-server-upgrade command failed when named-pkcs11 does not happen to run during dnf upgrade - DNS server upgrade: do not fail when DNS server did not respond - Resolves: #1367759 [RFE] [webui] warn admin if there is only one IPA server with CA - Add warning about only one existing CA server - Set servers list as default facet in topology facet group - Resolves: #1367773 thin client ignores locale change - schema check: Check current client language against cached one- Resolves: #1361119 UPN-based search for AD users does not match an entry in slapi-nis map cache - support multiple uid values in schema compatibility tree- Resolves: #1309700 Process /usr/sbin/winbindd was killed by signal 6 - Revert "spec: add conflict with bind-chroot to freeipa-server-dns" - Resolves: #1341249 Subsequent external CA installation fails - install: fix external CA cert validation - Resolves: #1353831 ipa-server-install fails in container because of hostnamectl set-hostname - server-install: Fix --hostname option to always override api.env values - install: Call hostnamectl set-hostname only if --hostname option is used - Resolves: #1356091 ipa-cacert-manage --help and man differ - Improvements for the ipa-cacert-manage man and help - Resolves: #1360631 ipa-backup is not keeping the /etc/tmpfiles.d/dirsrv-.conf - ipa-backup: backup /etc/tmpfiles.d/dirsrv-.conf - Resolves: #1361047 ipa-replica-install --help usage line suggests the replica file is needed - Update ipa-replica-install documentation - Resolves: #1361545 ipa-client-install starts rhel-domainname.service but does not rpm-require it - client: RPM require initscripts to get *-domainname.service - Resolves: #1364197 caacl: error when instantiating rules with service principals - caacl: fix regression in rule instantiation - Resolves: #1364310 ipa otptoken-add bytes object has no attribute confirm - parameters: move the `confirm` kwarg to Param - Resolves: #1364464 Topology graph: ca and domain adders shows question marks instead of plus icon - Fix unicode characters in ca and domain adders - Resolves: #1365083 Incomplete output returned for command ipa vault-add - client: add missing output params to client-side commands - Resolves: #1365526 build fails during "make check" - ipa-kdb: Fix unit test after packaging changes in krb5- Resolves: #1353829 traceback message seen in ipaserver-uninstall.log file. - Do not initialize API in ipa-client-automount uninstall - Resolves: #1356899 com.redhat.idm.trust.fetch_domains need update after thin client changes - idrange: fix unassigned global variable - Resolves: #1360792 Migrating users doesn't update krbCanonicalName - re-set canonical principal name on migrated users - Resolves: #1362012 ipa hbactest produces error about cannot concatenate 'str' and 'bool' objects - Fix ipa hbactest output - Resolves: #1362260 ipa vault-mod no longer allows defining salt - vault: add missing salt option to vault_mod - Resolves: #1362312 ipa vault-retrieve internal error when using the wrong public key - vault: Catch correct exception in decrypt - Resolves: #1362537 ipa-server-install fails to create symlink from /etc/ipa/kdcproxy/ to /etc/httpd/conf.d/ - Correct path to HTTPD's systemd service directory - Resolves: #1363756 Increase length of passwords generated by installer - Increase default length of auto generated passwords- Resolves: #1117306 [RFE] Allow multiple Principals per host entry (Kerberos aliases) - harden the check for trust namespace overlap in new principals - Resolves: #1351142 CLI is not using session cookies for communication with IPA API - Fix session cookies - Resolves: #1353888 Fix the help for ipa otp and other topics - help: Add dnsserver commands to help topic 'dns' - Resolves: #1354406 host-del updatedns options complains about missing ptr record for host - Host-del: fix behavior of --updatedns and PTR records - Resolves: #1355718 ipa-replica-manage man page example output differs actual command output - Minor fix in ipa-replica-manage MAN page - Resolves: #1358229 Traceback message should be fixed, seen while editing winsync migrated user information in Default trust view. - baseldap: Fix MidairCollision instantiation during entry modification - Resolves: #1358849 CA replica install logs to wrong log file - unite log file name of ipa-ca-install - Resolves: #1359130 ipa-server-install command fails to install IPA server. - DNS Locations: fix update-system-records unpacking error - Resolves: #1359237 AVC on dirsrv config caused by IPA installer - Use copy when replacing files to keep SELinux context - Resolves: #1359692 ipa-client-install join fail with traceback against RHEL-6.8 ipa-server - compat: fix ping call - Resolves: #1359738 ipa-replica-install --domain= option does not work - replica-install: Fix --domain - Resolves: #1360778 Vault commands are available in CLI even when the server does not support them - Revert "Enable vault-* commands on client" - client: fix hiding of commands which lack server support - Related: #1281704 Rebase to softhsm 2.1.0 - Remove the workaround for softhsm bug #1293340 - Related: #1298288 [RFE] Improve performance in large environments. - Create indexes for krbCanonicalName attribute- Resolves: #1296140 Remove redhat-access-plugin-ipa support - Obsolete and conflict redhat-access-plugin-ipa - Resolves: #1351119 Multiple issues while uninstalling ipa-server - server uninstall fails to remove krb principals - Resolves: #1351758 ipa commands not showing expected error messages - frontend: copy command arguments to output params on client - Show full error message for selinuxusermap-add-hostgroup - Resolves: #1352883 Traceback on adding default automember group and hostgroup set - allow 'value' output param in commands without primary key - Resolves: #1353888 Fix the help for ipa otp and other topics - schema: Fix subtopic -> topic mapping - Resolves: #1354348 ipa trustconfig-show throws internal error. - allow 'value' output param in commands without primary key - Resolves: #1354381 ipa trust-add with raw option gives internal error. - trust-add: handle `--all/--raw` options properly - Resolves: #1354493 Replica install fails with old IPA master - DNS install: Ensure that DNS servers container exists - Resolves: #1354628 ipa hostgroup-add-member does not return error message when adding itself as member - frontend: copy command arguments to output params on client - Resolves: #1355856 ipa otptoken-add --type=totp gives internal error - messages: specify message type for ResultFormattingError - Resolves: #1356063 "ipa radiusproxy-add" command needs to prompt to enter secret key - expose `--secret` option in radiusproxy-* commands - prevent search for RADIUS proxy servers by secret - Resolves: #1356099 Bug in the ipapwd plugin - Heap corruption in ipapwd plugin - Resolves: #1356899 com.redhat.idm.trust.fetch_domains need update after thin client changes - Use server API in com.redhat.idm.trust-fetch-domains oddjob helper - Resolves: #1356964 Renaming a user removes all of his principal aliases - Preserve user principal aliases during rename operation- Resolves: #1274524 [RFE] Qualify up to 60 IdM replicas - Resolves: #1320838 [RFE] Support IdM Client in a DNS domain controlled by AD - Related: #1356134 'kinit -E' does not work for IPA user- Resolves: #1356102 Server uninstall does not stop tracking lightweight sub-CA with certmonger - uninstall: untrack lightweight CA certs - Resolves: #1351807 ipa-nis-manage config.get_dn missing - ipa-nis-manage: Use server API to retrieve plugin status - Resolves: #1353452 ipa-compat-manage command failed, exception: NotImplementedError: config.get_dn() - ipa-compat-manage: use server API to retrieve plugin status - Resolves: #1353899 ipa-advise: object of type 'type' has no len() - ipa-advise: correct handling of plugin namespace iteration - Resolves: #1356134 'kinit -E' does not work for IPA user - kdb: check for local realm in enterprise principals - Resolves: #1353072 ipa unknown command vault-add - Enable vault-* commands on client - vault-add: set the default vault type on the client side if none was given - Resolves: #1353995 Default CA can be used without a CA ACL - caacl: expand plugin documentation - Resolves: #1356144 host-find should not print SSH keys by default, only SSH fingerprints - host-find: do not show SSH key by default - Resolves: #1353506 ipa migrate-ds command fails for IPA in RHEL 7.3 - Removed unused method parameter from migrate-ds- Resolves: #747612 [RFE] IPA should support and manage DNS sites - Resolves: #826790 Disabling password expiration (--maxlife=0 and --minlife=0) in the default global_policy in IPA sets user's password expiration (krbPasswordExpiration) to be 90 days - Resolves: #896699 ipa-replica-manage -H does not delete DNS SRV records - Resolves: #1084018 [RFE] Add IdM user password change support for legacy client compat tree - Resolves: #1117306 [RFE] Allow multiple Principals per host entry (Kerberos aliases) - Fix incorrect check for principal type when evaluating CA ACLs - Resolves: #1146860 [RFE] Offer OTP generation for host enrollment in the UI - Resolves: #1238190 ipasam unable to lookup group in directory yet manual search works - Resolves: #1250110 search by users which don't have read rights for all attrs in search_attributes fails - Resolves: #1263764 Show Certificate displays in useless format - Resolves: #1272491 [WebUI] Certificate action dropdown does not display all the options after adding new certificate - Resolves: #1292141 Rebase to FreeIPA 4.4+ - Rebase to 4.4.0 - Resolves: #1294503 IPA fails to issue 3rd party certs - Resolves: #1298242 [RFE] API compatibility - compatibility of clients - Resolves: #1298848 [RFE] Centralized topology management - Resolves: #1298966 [RFE] Extend Smart Card support - Resolves: #1315146 Multiple clients cannot join domain simultaneously: /var/run/httpd/ipa/clientcaches race condition? - Resolves: #1318903 ipa server install failing when SUBCA signs the cert - Resolves: #1319003 ipa-winsync-migrate: Traceback should be fixed with proper console output - Resolves: #1324055 IPA always qualify requests for admin - Resolves: #1328552 [RFE] Allow users to authenticate with alternative names - Resolves: #1334582 Inconsistent UI and CLI options for removing certificate hold - Resolves: #1346321 Exclude o=ipaca subtree from Retro Changelog (syncrepl) - Resolves: #1349281 Fix `Conflicts` with ipa-python - Resolves: #1350695 execution of copy-schema script fails - Resolves: #1351118 upgrade failed for RHEL-7.3 from RHEL-7.2.z - Resolves: #1351153 AVC seen on Replica during ipa-server upgrade test execution to 7.3 - Resolves: #1351276 ipa-server-install with dns cannot resolve itself to create ipa-ca entry - Related: #1343422 [RFE] Add GssapiImpersonate option- Resolves: #1348948 IPA server install fails with build ipa-server-4.4.0-0.el7.1.alpha1 - Revert "Increased mod_wsgi socket-timeout"- Resolves: #712109 "krbExtraData not allowed" is logged in DS error log while setting password for default sudo binddn. - Resolves: #747612 [RFE] IPA should support and manage DNS sites - Resolves: #768316 [RFE] ipa-getkeytab should auto-detect the ipa server name - Resolves: #825391 [RFE] Replica installation should provide a means for inheriting nssldap security access settings - Resolves: #921497 Incorrect *.py[co] files placement - Resolves: #1029640 RHEL7 IPA to add DNA Plugin config for dnaRemote support - Resolves: #1029905 389 DS cache sizes not replicated to IPA replicas - Resolves: #1196958 IPA replica installation failing with high number of users (160000). - Resolves: #1219402 IPA suggests to uninstall a client when the user needs to uninstall a replica - Resolves: #1224057 [RFE] TGS authorization decisions in KDC based on Authentication Indicator - Resolves: #1234222 [WebUI] UI error message is not appropriate for "Kerberos principal expiration" - Resolves: #1234223 [WebUI] General invalid password error message appearing for "Locked user" - Resolves: #1254267 ipa-server-install failure applying ldap updates with limits exceeded - Resolves: #1258626 realmdomains-mod --add-domain command throwing error when doamin already is in forwardzone. - Resolves: #1259020 ipa-server-adtrust-install doesn't allow NetBIOS-name=EXAMPLE-TEST.COM (dash character) - Resolves: #1260993 DNSSEC signing enablement on dnszone should throw error message when DNSSEC master not installed - Resolves: #1262747 dnssec options missing in ipa-dns-install man page - Resolves: #1265900 Fail installation immediately after dirsrv fails to install using ipa-server-install - Resolves: #1265915 idoverrideuser-find fails if any SID anchor is not resolvable anymore - Resolves: #1268027 ipa-dnskeysync-replica crash with backtrace - LimitsExceeded: limits exceeded for this query - Resolves: #1269089 Certificate of managed-by host/service fails to resubmit - Resolves: #1269200 ipa-server crashing while trying to preserve admin user - Resolves: #1271321 Reduce ioblocktimeout and idletimeout defaults - Resolves: #1271579 Automember rule expressions disappear from tables on single expression delete - Resolves: #1275816 Incomplete ports for IPA ad-trust - Resolves: #1276351 [RFE] Remove /usr/share/ipa/updates/50-lockout-policy.update file from IPA releases - Resolves: #1277109 Add tool tips for Revert, Refresh, Undo, and Undo All in the IPA UI - Resolves: #1278426 Better error message needed for invalid ca-signing-algo option - Resolves: #1279932 ipa-client-install --request-cert needs workaround in anaconda chroot - Resolves: #1282521 Creating a user w/o private group fails when doing so in WebUI - Resolves: #1283879 ipa-winsync-migrate: Traceback message should be replaced by "IPA is not configured on this system" - Resolves: #1285071 ipa-kra-install fails on replica looking for admin cert file - Resolves: #1287194 [RFE] Support of UPN for trusted domains - Resolves: #1288967 Normalize Manager entry in ipa user-add - Resolves: #1289487 Priority field missing in Password Policy detail tab - Resolves: #1291140 ipa client should configure kpasswd_server directive in krb5.conf - Resolves: #1292141 Rebase to FreeIPA 4.4+ - Rebase to 4.4.0.alpha1 - Resolves: #1298848 [RFE] Centralized topology management - Resolves: #1300576 Browser setup page includes instructions for Internet Explorer - Resolves: #1301586 ipa host-del --updatedns should remove related dns entries. - Resolves: #1304618 Residual Files After IPA Server Uninstall - Resolves: #1305144 ipa-python does not require its dependencies - Resolves: #1309700 Process /usr/sbin/winbindd was killed by signal 6 - Resolves: #1313798 Console output post ipa-winsync-migrate command should be corrected. - Resolves: #1314786 [RFE] External Trust with Active Directory domain - Resolves: #1319023 Include description for 'status' option in man page for ipactl command. - Resolves: #1319912 ipa-server-install does not completely change hostname and named-pkcs11 fails - Resolves: #1320891 IPA Error 3009: Validation error: Invalid 'ptrrecord': Reverse zone in-addr.arpa. requires exactly 4 IP address compnents, 5 given - Resolves: #1327207 ipa cert-revoke --help doesn't provide enough info on revocation reasons - Resolves: #1328549 "ipa-kra-install" command reports incorrect message when it is executed on server already installed with KRA. - Resolves: #1329209 ipa-nis-manage enable: change service name from 'portmap' to 'rpcbind' - Resolves: #1329275 ipa-nis-manage command should include status option - Resolves: #1330843 'man ipa' should be updated with latest commands - Resolves: #1333755 ipa cert-request causes internal server error while requesting certificate - Resolves: #1337484 EOF is not handled for ipa-client-install command - Resolves: #1338031 Insufficient 'write' privilege on some attributes for the members of the role which has "User Administrators" privilege. - Resolves: #1343142 IPA DNS should do better verification of DNS zones - Resolves: #1347928 Frontpage exposes runtime error with no cookies enabled in browser- Resolves: #1339483 ipa-server-install fails with ERROR pkinit_cert_files - Fix incorrect rebase of patch 1001- Resolves: #1339233 CA installed on replica is always marked as renewal master - Related: #1292141 Rebase to FreeIPA 4.4+ - Rebase to 4.3.1.201605241723GIT1b427d3- Resolves: #1332809 ipa-server-4.2.0-15.el7_2.6.1.x86_64 fails to install because of missing dependencies - Rebuild with krb5-1.14.1- Resolves: #837369 [RFE] Switch to client promotion to replica model - Resolves: #1199516 [RFE] Move replication topology to the shared tree - Resolves: #1206588 [RFE] Visualize FreeIPA server replication topology - Resolves: #1211602 Hide ipa-server-install KDC master password option (-P) - Resolves: #1212713 ipa-csreplica-manage: it could be nice to have also list-ruv / clean-ruv / abort-clean-ruv for o=ipaca backend - Resolves: #1267206 ipa-server-install uninstall should warn if no installation found - Resolves: #1295865 The Domain option is not correctly set in idmapd.conf when ipa-client-automount is executed. - Resolves: #1327092 URI details missing and OCSP-URI details are incorrectly displayed when certificate generated using IPA on RHEL 7.2up2. - Resolves: #1332809 ipa-server-4.2.0-15.el7_2.6.1.x86_64 fails to install because of missing dependencies - Related: #1292141 Rebase to FreeIPA 4.4+ - Rebase to 4.3.1.201605191449GITf8edf37- Resolves: #1277696 IPA certificate auto renewal fail with "Invalid Credential" - cert renewal: make renewal of ipaCert atomic - Resolves: #1278330 installer options are not validated at the beginning of installation - install: fix command line option validation - Resolves: #1282845 sshd_config change on ipa-client-install can prevent sshd from starting up - client install: do not corrupt OpenSSH config with Match sections - Resolves: #1282935 ipa upgrade causes vault internal error - install: export KRA agent PEM file in ipa-kra-install - Resolves: #1283429 Default CA ACL rule is not created during ipa-replica-install - TLS and Dogtag HTTPS request logging improvements - Avoid race condition caused by profile delete and recreate - Do not erroneously reinit NSS in Dogtag interface - Add profiles and default CA ACL on migration - disconnect ldap2 backend after adding default CA ACL profiles - do not disconnect when using existing connection to check default CA ACLs - Resolves: #1283430 ipa-kra-install: fails to apply updates - suppress errors arising from adding existing LDAP entries during KRA install - Resolves: #1283748 Caching of ipaconfig does not work in framework - fix caching in get_ipa_config - Resolves: #1283943 IPA DNS Zone/DNS Forward Zone details missing after upgrade from RHEL 7.0 to RHEL 7.2 - upgrade: fix migration of old dns forward zones - Fix upgrade of forwardzones when zone is in realmdomains - Resolves: #1284413 ipa-cacert-manage renew fails on nonexistent ldap connection - ipa-cacert-renew: Fix connection to ldap. - Resolves: #1284414 ipa-otptoken-import fails on nonexistent ldap connection - ipa-otptoken-import: Fix connection to ldap. - Resolves: #1286635 IPA server upgrade fails from RHEL 7.0 to RHEL 7.2 using "yum update ipa* sssd" - Set minimal required version for openssl - Resolves: #1286781 ipa-nis-manage does not update ldap with all NIS maps - Upgrade: Fix upgrade of NIS Server configuration - Resolves: #1289311 umask setting causes named-pkcs11 issue with directory permissions on /var/lib/ipa/dnssec - DNS: fix file permissions - Explicitly call chmod on newly created directories - Fix: replace mkdir with chmod - Resolves: #1290142 Broken 7.2.0 to 7.2.z upgrade - flawed version comparison - Fix version comparison - use FFI call to rpmvercmp function for version comparison - Resolves: #1292595 In IPA-AD trust environment some secondary IPA based Posix groups are missing - ipa-kdb: map_groups() consider all results - Resolves: #1293870 User should be notified for wrong password in password reset page - Fixed login error message box in LoginScreen page - Resolves: #1296196 Sysrestore did not restore state if a key is specified in mixed case - Allow to used mixed case for sysrestore - Resolves: #1296214 DNSSEC key purging is not handled properly - DNSSEC: Improve error reporting from ipa-ods-exporter - DNSSEC: Make sure that current state in OpenDNSSEC matches key state in LDAP - DNSSEC: Make sure that current key state in LDAP matches key state in BIND - DNSSEC: remove obsolete TODO note - DNSSEC: add debug mode to ldapkeydb.py - DNSSEC: logging improvements in ipa-ods-exporter - DNSSEC: remove keys purged by OpenDNSSEC from master HSM from LDAP - DNSSEC: ipa-dnskeysyncd: Skip zones with old DNSSEC metadata in LDAP - DNSSEC: ipa-ods-exporter: add ldap-cleanup command - DNSSEC: ipa-dnskeysyncd: call ods-signer ldap-cleanup on zone removal - DNSSEC: Log debug messages at log level DEBUG - Resolves: #1296216 ipa-server-upgrade fails if certmonger is not running - prevent crash of CA-less server upgrade due to absent certmonger - always start certmonger during IPA server configuration upgrade - Resolves: #1297811 The ipa -e skip_version_check=1 still issues incompatibility error when called against RHEL 6 server - ipalib: assume version 2.0 when skip_version_check is enabled - Resolves: #1298289 install fails when locale is "fr_FR.UTF-8" - Do not decode HTTP reason phrase from Dogtag - Resolves: #1300252 shared certificateProfiles container is missing on a freshly installed RHEL7.2 system - upgrade: unconditional import of certificate profiles into LDAP - Resolves: #1301674 --setup-dns and other options is forgotten for using an external PKI - installer: Propagate option values from components instead of copying them. - installer: Fix logic of reading option values from cache. - Resolves: #1301687 issues with migration from RHEL 6 self-signed to RHEL 7 CA IPA setup - ipa-ca-install: print more specific errors when CA is already installed - cert renewal: import all external CA certs on IPA CA cert renewal - CA install: explicitly set dogtag_version to 10 - fix standalone installation of externally signed CA on IPA master - replica install: validate DS and HTTP server certificates - replica install: improvements in the handling of CA-related IPA config entries - Resolves: #1301901 [RFE] compat tree: show AD members of IPA groups - slapi-nis: update configuration to allow external members of IPA groups - Resolves: #1305533 ipa trust-add succeded but after that ipa trust-find returns "0 trusts matched" - upgrade: fix config of sidgen and extdom plugins - trusts: use ipaNTTrustPartner attribute to detect trust entries - Warn user if trust is broken - fix upgrade: wait for proper DS socket after DS restart - Insure the admin_conn is disconnected on stop - Fix connections to DS during installation - Fix broken trust warnings - Resolves: #1321092 Installers fail when there are multiple versions of the same certificate - certdb: never use the -r option of certutil - Related: #1317381 Crash during IPA upgrade due to slapd - spec file: update minimum required version of slapi-nis - Related: #1322691 CVE-2015-5370 CVE-2016-2110 CVE-2016-2111 CVE-2016-2112 CVE-2016-2113 CVE-2016-2114 CVE-2016-2115 CVE-2016-2118 samba: various flaws [rhel-7.3] - Rebuild against newer Samba version- Resolves: #1252556 Missing CLI param and ACL for vault service operations - vault: fix private service vault creation- Resolves: #1262996 ipa vault internal error on replica without KRA - upgrade: make sure ldap2 is connected in export_kra_agent_pem - Resolves: #1270608 IPA upgrade fails for server with CA cert signed by external CA - schema: do not derive ipaVaultPublicKey from ipaPublicKey- Resolves: #1217009 OTP sync in UI does not work for TOTP tokens - Fix an integer underflow bug in libotp - Resolves: #1262996 ipa vault internal error on replica without KRA - install: always export KRA agent PEM file - vault: select a server with KRA for vault operations - Resolves: #1269777 IPA restore overwrites /etc/passwd and /etc/group files - do not overwrite files with local users/groups when restoring authconfig - Renamed patch 1011 to 0138, as it was merged upstream- Resolves: #1204205 [RFE] ID Views: Automated migration tool from Winsync to Trusts - winsync-migrate: Convert entity names to posix friendly strings - winsync-migrate: Properly handle collisions in the names of external groups - Resolves: #1261074 Adjust Firefox configuration to new extension signing policy - webui: use manual Firefox configuration for Firefox >= 40 - Resolves: #1263337 IPA Restore failed with installed KRA - ipa-backup: Add mechanism to store empty directory structure - Resolves: #1264793 CVE-2015-5284 ipa: ipa-kra-install includes certificate and private key in world readable file [rhel-7.2] - install: fix KRA agent PEM file permissions - Resolves: #1265086 Mark IdM API Browser as experimental - WebUI: add API browser is experimental warning - Resolves: #1265277 Fix kdcproxy user creation - install: create kdcproxy user during server install - platform: add option to create home directory when adding user - install: fix kdcproxy user home directory - Resolves: #1265559 GSS failure after ipa-restore - destroy httpd ccache after stopping the service- Resolves: #1258965 ipa vault: set owner of vault container - baseldap: make subtree deletion optional in LDAPDelete - vault: add vault container commands - vault: set owner to current user on container creation - vault: update access control - vault: add permissions and administrator privilege - install: support KRA update - Resolves: #1261586 ipa config-mod addattr fails for ipauserobjectclasses - config: allow user/host attributes with tagging options - Resolves: #1262315 Unable to establish winsync replication - winsync: Add inetUser objectclass to the passsync sysaccount- Resolves: #1260663 crash of ipa-dnskeysync-replica component during ipa-restore - IPA Restore: allows to specify files that should be removed - Resolves: #1261806 Installing ipa-server package breaks httpd - Handle timeout error in ipa-httpd-kdcproxy - Resolves: #1262322 Failed to backup CS.cfg message in upgrade. - Server Upgrade: backup CS.cfg when dogtag is turned off- Resolves: #1257074 The KRA agent cert is stored in a PEM file that is not tracked - cert renewal: Include KRA users in Dogtag LDAP update - cert renewal: Automatically update KRA agent PEM file - Resolves: #1257163 renaming certificatte profile with --rename option leads to integrity issues - certprofile: remove 'rename' option - Resolves: #1257968 kinit stop working after ipa-restore - Backup: back up the hosts file - Resolves: #1258926 Remove 'DNSSEC is experimental' warnings - DNSSEC: remove "DNSSEC is experimental" warnings - Resolves: #1258929 Uninstallation of IPA leaves extra entry in /etc/hosts - Installer: do not modify /etc/hosts before user agreement - Resolves: #1258944 DNSSEC daemons may deadlock when processing more than 1 zone - DNSSEC: backup and restore opendnssec zone list file - DNSSEC: remove ccache and keytab of ipa-ods-exporter - DNSSEC: prevent ipa-ods-exporter from looping after service auto-restart - DNSSEC: Fix deadlock in ipa-ods-exporter <-> ods-enforcerd interaction - DNSSEC: Fix HSM synchronization in ipa-dnskeysyncd when running on DNSSEC key master - DNSSEC: Fix key metadata export - DNSSEC: Wrap master key using RSA OAEP instead of old PKCS v1.5. - Resolves: #1258964 revert to use ldapi to add kra agent in KRA install - Using LDAPI to setup CA and KRA agents. - Resolves: #1259848 server closes connection and refuses commands after deleting user that is still logged in - ldap: Make ldap2 connection management thread-safe again - Resolves: #1259996 AttributeError: 'NameSpace' object has no attribute 'ra_certprofile' while ipa-ca-install - load RA backend plugins during standalone CA install on CA-less IPA master- Resolves: #1254689 Storing big file as a secret in vault raises traceback - vault: Limit size of data stored in vault - Resolves: #1255880 ipactl status should distinguish between different pki-tomcat services - ipactl: Do not start/stop/restart single service multiple times- Resolves: #1256840 [webui] majority of required fields is no longer marked as required - fix missing information in object metadata - Resolves: #1256842 [webui] no option to choose trust type when creating a trust - webui: add option to establish bidirectional trust - Resolves: #1256853 Clear text passwords in KRA install log - Removed clear text passwords from KRA install log. - Resolves: #1257072 The "Standard Vault" MUST not be the default and must be discouraged - vault: change default vault type to symmetric - Resolves: #1257163 renaming certificatte profile with --rename option leads to integrity issues - certprofile: prevent rename (modrdn)- Resolves: #1249226 IPA dnssec-validation not working for AD dnsforwardzone - DNSSEC: fix forward zone forwarders checks - Resolves: #1250190 idrange is not added for sub domain - trusts: format Kerberos principal properly when fetching trust topology - Resolves: #1252334 User life cycle: missing ability to provision a stage user from a preserved user - Add user-stage command - Resolves: #1252863 After applying RHBA-2015-1554 errata, IPA service fails to start. - spec file: Add Requires(post) on selinux-policy - Resolves: #1254304 Changing vault encryption attributes - Change internal rsa_(public|private)_key variable names - Added support for changing vault encryption. - Resolves: #1256715 Executing user-del --preserve twice removes the user pernamently - improve the usability of `ipa user-del --preserve` command- Resolves: #1199530 [RFE] Provide user lifecycle managment capabilities - user-undel: Fix error messages. - Resolves: #1200694 [RFE] Support for multiple cert profiles - Prohibit deletion of predefined profiles - Resolves: #1232819 testing ipa-restore on fresh system install fails - Backup/resore authentication control configuration - Resolves: #1243331 pkispawn fails when migrating to 4.2 server from 3.0 server - Require Dogtag PKI >= 10.2.6 - Resolves: #1245225 Asymmetric vault drops traceback when the key is not proper - Asymmetric vault: validate public key in client - Resolves: #1248399 Missing DNSSEC related files in backup - fix typo in BasePathNamespace member pointing to ods exporter config - ipa-backup: archive DNSSEC zone file and kasp.db - Resolves: #1248405 PassSync should be disabled after ipa-winsync-migrate is finished - winsync-migrate: Add warning about passsync - winsync-migrate: Expand the man page - Resolves: #1248524 User can't find any hosts using "ipa host-find $HOSTNAME" - adjust search so that it works for non-admin users - Resolves: #1250093 ipa certprofile-import accepts invalid config - Require Dogtag PKI >= 10.2.6 - Resolves: #1250107 IPA framework should not allow modifying trust on AD trust agents - trusts: Detect missing Samba instance - Resolves: #1250111 User lifecycle - preserved users can be assigned membership - ULC: Prevent preserved users from being assigned membership - Resolves: #1250145 Add permission for user to bypass caacl enforcement - Add permission for bypassing CA ACL enforcement - Resolves: #1250190 idrange is not added for sub domain - idranges: raise an error when local IPA ID range is being modified - trusts: harden trust-fetch-domains oddjobd-based script - Resolves: #1250928 Man page for ipa-server-install is out of sync - install: Fix server and replica install options - Resolves: #1251225 IPA default CAACL does not allow cert-request for services after upgrade - Fix default CA ACL added during upgrade - Resolves: #1251561 ipa vault-add Unknown option: ipavaultpublickey - validate mutually exclusive options in vault-add - Resolves: #1251579 ipa vault-add --user should set container owner equal to user on first run - Fixed vault container ownership. - Resolves: #1252517 cert-request rejects request with correct krb5PrincipalName SAN - Fix KRB5PrincipalName / UPN SAN comparison - Resolves: #1252555 ipa vault-find doesn't work for services - vault: Add container information to vault command results - Add flag to list all service and user vaults - Resolves: #1252556 Missing CLI param and ACL for vault service operations - Added CLI param and ACL for vault service operations. - Resolves: #1252557 certprofile: improve profile format documentation - certprofile-import: improve profile format documentation - certprofile: add profile format explanation - Resolves: #1253443 ipa vault-add creates vault with invalid type - vault: validate vault type - Resolves: #1253480 ipa vault-add-owner does not fail when adding an existing owner - baseldap: Allow overriding member param label in LDAPModMember - vault: Fix param labels in output of vault owner commands - Resolves: #1253511 ipa vault-find does not use criteria - vault: Fix vault-find with criteria - Resolves: #1254038 ipa-replica-install pk12util error returns exit status 10 - install: Fix replica install with custom certificates - Resolves: #1254262 ipa-dnskeysync-replica crash cannot contact kdc - improve the handling of krb5-related errors in dnssec daemons - Resolves: #1254412 when dirsrv is off ,upgrade from 7.1 to 7.2 fails with starting CA and named-pkcs11.service - Server Upgrade: Start DS before CA is started. - Resolves: #1254637 Add ACI and permission for managing user userCertificate attribute - add permission: System: Manage User Certificates - Resolves: #1254641 Remove CSR allowed-extensions restriction - cert-request: remove allowed extensions check - Resolves: #1254693 vault --service does not normalize service principal - vault: normalize service principal in service vault operations - Resolves: #1254785 ipa-client-install does not properly handle dual stacked hosts - client: Add support for multiple IP addresses during installation. - Add dependency to SSSD 1.13.1 - client: Add description of --ip-address and --all-ip-addresses to man page- Resolves: #1072383 [RFE] Provide ability to map CAC identity certificates to users in IdM - store certificates issued for user entries as - user-show: add --out option to save certificates to file - Resolves: #1145748 [RFE] IPA running with One Way Trust - Fix upgrade of sidgen and extdom plugins - Resolves: #1195339 ipa-client-install changes the label on various files which causes SELinux denials - Use 'mv -Z' in specfile to restore SELinux context - Resolves: #1198796 Text in UI should describe differing LDAP vs Krb behavior for combinations of "User authentication types" - webui: add LDAP vs Kerberos behavior description to user auth - Resolves: #1199530 [RFE] Provide user lifecycle managment capabilities - ULC: Fix stageused-add --from-delete command - Resolves: #1200694 [RFE] Support for multiple cert profiles - certprofile-import: do not require profileId in profile data - Give more info on virtual command access denial - Allow SAN extension for cert-request self-service - Add profile for DNP3 / IEC 62351-8 certificates - Work around python-nss bug on unrecognised OIDs - Resolves: #1204501 [RFE] Add Password Vault (KRA) functionality - Validate vault's file parameters - Fixed missing KRA agent cert on replica. - Resolves: #1225866 display browser config options that apply to the browser. - webui: add Kerberos configuration instructions for Chrome - Remove ico files from Makefile - Resolves: #1246342 Unapply idview raises internal error - idviews: Check for the Default Trust View only if applying the view - Resolves: #1248102 [webui] regression - incorrect/no failed auth messages - webui: fix regressions failed auth messages - Resolves: #1248396 Internal error in DomainValidator.__search_in_dc - dcerpc: Fix UnboundLocalError for ccache_name - Resolves: #1249455 ipa trust-add failed CIFS server configuration does not allow access to \\pipe\lsarpc - Fix selector of protocol for LSA RPC binding string - dcerpc: Simplify generation of LSA-RPC binding strings - Resolves: #1250192 Error in ipa trust-fecth-domains - Fix incorrect type comparison in trust-fetch-domains - Resolves: #1251553 Winsync setup fails with unexpected error - replication: Fix incorrect exception invocation - Resolves: #1251854 ipa aci plugin is not parsing aci's correctly. - ACI plugin: correctly parse bind rules enclosed in - Resolves: #1252414 Trust agent install does not detect available replicas to add to master - adtrust-install: Correctly determine 4.2 FreeIPA servers- Resolves: #1170770 [AD TRUST]IPA should detect inconsistent realm domains that conflicts with AD DC - trusts: Check for AD root domain among our trusted domains - Resolves: #1195339 ipa-client-install changes the label on various files which causes SELinux denials - sysrestore: copy files instead of moving them to avoind SELinux issues - Resolves: #1196656 [ipa-client][rhel71] enable debugging for spawned commands / ntpd -qgc $tmpfile hangs - enable debugging of ntpd during client installation - Resolves: #1205264 Migration UI Does Not Work When Anonymous Bind is Disabled - migration: Use api.env variables. - Resolves: #1212719 abort-clean-ruv subcommand should allow replica-certifyall: no - Allow value 'no' for replica-certify-all attr in abort-clean-ruv subcommand - Resolves: #1216935 ipa trust-add shows ipa: ERROR: an internal error has occurred - dcerpc: Expand explanation for WERR_ACCESS_DENIED - dcerpc: Fix UnboundLocalError for ccache_name - Resolves: #1222778 idoverride group-del can delete user and user-del can delete group - dcerpc: Add get_trusted_domain_object_type method - idviews: Restrict anchor to name and name to anchor conversions - idviews: Enforce objectclass check in idoverride*-del - Resolves: #1234919 Be able to request certificates without certmonger service running - cermonger: Use private unix socket when DBus SystemBus is not available. - ipa-client-install: Do not (re)start certmonger and DBus daemons. - Resolves: #1240939 Please add dependency on bind-pkcs11 - Create server-dns sub-package. - ipaplatform: Add constants submodule - DNS: check if DNS package is installed - Resolves: #1242914 Bump minimal selinux-policy and add booleans to allow calling out oddjobd-activated services - selinux: enable httpd_run_ipa to allow communicating with oddjobd services - Resolves: #1243261 non-admin users cannot search hbac rules - fix hbac rule search for non-admin users - fix selinuxusermap search for non-admin users - Resolves: #1243652 Client has missing dependency on memcache - do not import memcache on client - Resolves: #1243835 [webui] user change password dialog does not work - webui: fix user reset password dialog - Resolves: #1244802 spec: selinux denial during kdcproxy user creation - Fix selinux denial during kdcproxy user creation - Resolves: #1246132 trust-fetch-domains: Do not chown keytab to the sssd user - oddjob: avoid chown keytab to sssd if sssd user does not exist - Resolves: #1246136 Adding a privilege to a permission avoids validation - Validate adding privilege to a permission - Resolves: #1246141 DNS Administrators cannot search in zones - DNS: Consolidate DNS RR types in API and schema - Resolves: #1246143 User plugin - user-find doesn't work properly with manager option - fix broken search for users by their manager- Resolves: #1131907 [ipa-client-install] cannot write certificate file '/etc/ipa/ca.crt.new': must be string or buffer, not None - Resolves: #1195775 unsaved changes dialog internally inconsistent - Resolves: #1199530 [RFE] Provide user lifecycle managment capabilities - Stageusedr-activate: show username instead of DN - Resolves: #1200694 [RFE] Support for multiple cert profiles - Prevent to rename certprofile profile id - Resolves: #1222047 IPA to AD Trust: IPA ERROR 4016: Remote Retrieve Error - Resolves: #1224769 copy-schema-to-ca.py does not overwrites schema files - copy-schema-to-ca: allow to overwrite schema files - Resolves: #1241941 kdc component installation of IPA failed - spec file: Update minimum required version of krb5 - Resolves: #1242036 Replica install fails to update DNS records - Fix DNS records installation for replicas - Resolves: #1242884 Upgrade to 4.2.0 fails when enabling kdc proxy - Start dirsrv for kdcproxy upgrade- Resolves: #846033 [RFE] Documentation for JSONRPC IPA API - Resolves: #989091 Ability to manage IdM/IPA directly from a standard LDAP client - Resolves: #1072383 [RFE] Provide ability to map CAC identity certificates to users in IdM - Resolves: #1115294 [RFE] Add support for DNSSEC - Resolves: #1145748 [RFE] IPA running with One Way Trust - Resolves: #1199520 [RFE] Introduce single upgrade tool - ipa-server-upgrade - Resolves: #1199530 [RFE] Provide user lifecycle managment capabilities - Resolves: #1200694 [RFE] Support for multiple cert profiles - Resolves: #1200728 [RFE] Replicate PKI Profile information - Resolves: #1200735 [RFE] Allow issuing certificates for user accounts - Resolves: #1204054 SSSD database is not cleared between installs and uninstalls of ipa - Resolves: #1204205 [RFE] ID Views: Automated migration tool from Winsync to Trusts - Resolves: #1204501 [RFE] Add Password Vault (KRA) functionality - Resolves: #1204504 [RFE] Add access control so hosts can create their own services - Resolves: #1206534 [RFE] Offer Kerberos over HTTP (kdcproxy) by default - Resolves: #1206613 [RFE] Configure IPA to be a trust agent by default - Resolves: #1209476 package ipa-client does not require package dbus-python - Resolves: #1211589 [RFE] Add option to skip the verify_client_version - Resolves: #1211608 [RFE] Generic support for unknown DNS RR types (RFC 3597) - Resolves: #1215735 ipa-replica-prepare automatically adds a DNS zone - Resolves: #1217010 OTP Manager field is not exposed in the UI - Resolves: #1222475 krb5kdc : segfault at 0 ip 00007fa9f64d82bb sp 00007fffd68b2340 error 6 in libc-2.17.so - Related: #1204809 Rebase ipa to 4.2 - Update to upstream 4.2.0 - Move /etc/ipa/kdcproxy to the server subpackage- Resolves: #1228671 pkispawn fails in ipa-ca-install and ipa-kra-install - Related: #1204809 Rebase ipa to 4.2 - Fix minimum version of slapi-nis - Require python-sss and python-sss-murmur (provided by sssd-1.13.0)- Resolves: #805188 [RFE] "ipa migrate-ds" ldapsearches with scope=1 - Resolves: #1019272 With 20000+ users, adding a user to a group intermittently throws Internal server error - Resolves: #1035494 Unable to add Kerberos principal via kadmin.local - Resolves: #1045153 ipa-managed-entries --list -p still requires DM password - Resolves: #1125950 ipa-server-install --uinstall doesn't remove port 7389 from ldap_port_t - Resolves: #1132540 [RFE] Expose service delegation rules in UI and CLI - Resolves: #1145584 ipaserver/install/cainstance.py creates pkiuser not matching uidgid - Resolves: #1176036 IDM client registration failure in a high load environment - Resolves: #1183116 Remove Requires: subscription-manager - Resolves: #1186054 permission-add does not prompt to enter --right option in interactive mode - Resolves: #1187524 Replication agreement with replica not disabled when ipa-restore done without IPA installed - Resolves: #1188195 Fax number not displayed for user-show when kinit'ed as normal user. - Resolves: #1189034 "an internal error has occurred" during ipa host-del --updatedns - Resolves: #1193554 ipa-client-automount: failing with error LDAP server returned UNWILLING_TO_PERFORM. This likely means that minssf is enabled. - Resolves: #1193759 IPA extdom plugin fails when encountering large groups - Resolves: #1194312 [ipa-python] ipalib.errors.LDAPError: failed to decode certificate: (SEC_ERROR_INVALID_ARGS) security library: invalid arguments. - Resolves: #1194633 Default trust view can be deleted in lower case - Resolves: #1196455 ipa-server-install step [8/27]: starting certificate server instance - confusing CA staus message on TLS error - Resolves: #1198263 Limit deadlocks between DS plugin DNA and slapi-nis - Resolves: #1199527 [RFE] Use datepicker component for datetime fields - Resolves: #1200867 [RFE] Make OTP validation window configurable - Resolves: #1200883 [RFE] Switch apache to use mod_auth_gssapi - Resolves: #1202998 CVE-2015-1827 ipa: memory corruption when using get_user_grouplist() [rhel-7.2] - Resolves: #1204637 slow group operations - Resolves: #1204642 migrate-ds: slow add o users to default group - Resolves: #1208461 IPA CA master server update stuck on checking getStatus via https - Resolves: #1211602 Hide ipa-server-install KDC master password option (-P) - Resolves: #1211708 ipa-client-install gets stuck during NTP sync - Resolves: #1215197 ipa-client-install ignores --ntp-server option during time sync - Resolves: #1215200 ipa-client-install configures IPA server as NTP source even if IPA server has not ntpd configured - Resolves: #1217009 OTP sync in UI does not work for TOTP tokens - Related: #1204809 Rebase ipa to 4.2 - Update to upstream 4.2.0.alpha1- [ipa-python] ipalib.errors.LDAPError: failed to decode certificate: (SEC_ERROR_INVALID_ARGS) security library: invalid arguments. (#1194312)- IPA extdom plugin fails when encountering large groups (#1193759) - CVE-2015-0283 ipa: slapi-nis: infinite loop in getgrnam_r() and getgrgid_r() (#1202998)- "an internal error has occurred" during ipa host-del --updatedns (#1198431) - Renamed patch 1013 to 0114, as it was merged upstream - Fax number not displayed for user-show when kinit'ed as normal user. (#1198430) - Replication agreement with replica not disabled when ipa-restore done without IPA installed (#1199060) - Limit deadlocks between DS plugin DNA and slapi-nis (#1199128)- Fix ipa-pwd-extop global configuration caching (#1187342) - group-detach does not add correct objectclasses (#1187540)- Wrong directories created on full restore (#1186398) - ipa-restore crashes if replica is unreachable (#1186396) - idoverrideuser-add option --sshpubkey does not work (#1185410)- PassSync does not sync passwords due to missing ACIs (#1181093) - ipa-replica-manage list does not list synced domain (#1181010) - Do not assume certmonger is running in httpinstance (#1181767) - ipa-replica-manage disconnect fails without password (#1183279) - Put LDIF files to their original location in ipa-restore (#1175277) - DUA profile not available anonymously (#1184149) - IPA replica missing data after master upgraded (#1176995)- Re-add accidentally removed patches for #1170695 and #1164896- IPA Replicate creation fails with error "Update failed! Status: [10 Total update abortedLDAP error: Referral]" (#1166265) - running ipa-server-install --setup-dns results in a crash (#1072502) - DNS zones are not migrated into forward zones if 4.0+ replica is added (#1175384) - gid is overridden by uid in default trust view (#1168904) - When migrating warn user if compat is enabled (#1177133) - Clean up debug log for trust-add (#1168376) - No error message thrown on restore(full kind) on replica from full backup taken on master (#1175287) - ipa-restore proceed even IPA not configured (#1175326) - Data replication not working as expected after data restore from full backup (#1175277) - IPA externally signed CA cert expiration warning missing from log (#1178128) - ipa-upgradeconfig fails in CA-less installs (#1181767) - IPA certs fail to autorenew simultaneouly (#1173207) - More validation required on ipa-restore's options (#1176034)- Expand the token auth/sync windows (#919228) - Access is not rejected for disabled domain (#1172598) - krb5kdc crash in ldap_pvt_search (#1170695) - RHEL7.1 IPA server httpd avc denials after upgrade (#1164896)- RHEL7.1 ipa-cacert-manage renewed certificate from MS ADCS not compatible (#1169591) - CLI doesn't show SSHFP records with SHA256 added via nsupdate (regression) (#1172578)- Throw zonemgr error message before installation proceeds (#1163849) - Winsync: Setup is broken due to incorrect import of certificate (#1169867) - Enable last token deletion when password auth type is configured (#919228) - ipa-otp-lasttoken loads all user's tokens on every mod/del (#1166641) - add --hosts and --hostgroup options to allow/retrieve keytab methods (#1007367) - Extend host-show to add the view attribute in set of default attributes (#1168916) - Prefer TCP connections to UDP in krb5 clients (#919228) - [WebUI] Not able to unprovisioning service in IPA 4.1 (#1168214) - webui: increase notification duration (#1171089) - RHEL7.1 ipa automatic CA cert renewal stuck in submitting state (#1166931) - RHEL7.1 ipa-cacert-manage cannot change external to self-signed ca cert (#1170003) - Improve validation of --instance and --backend options in ipa-restore (#951581) - RHEL7.1 ipa replica unable to replicate to rhel6 master (#1167964) - Disable TLS 1.2 in nss.conf until mod_nss supports it (#1156466)- Use NSS protocol range API to set available TLS protocols (#1156466)- schema update on RHEL-6.6 using latest copy-schema-to-ca.py from RHEL-7.1 build fails (#1167196) - Investigate & fix Coverity defects in IPA DS/KDC plugins (#1160756) - "ipa trust-add ... " cmd says : (Trust status: Established and verified) while in the logs we see "WERR_ACCESS_DENIED" during verification step. (#1144121) - POODLE: force using safe ciphers (non-SSLv3) in IPA client and server (#1156466) - Add support/hooks for a one-time password system like SecureID in IPA (#919228) - Tracebacks with latest build for --zonemgr cli option (#1167270) - ID Views: Support migration from the sync solution to the trust solution (#891984)- Improve otptoken help messages (#919228) - Ensure users exist when assigning tokens to them (#919228) - Enable QR code display by default in otptoken-add (#919228) - Show warning instead of error if CA did not start (#1158410) - CVE-2014-7850 freeipa: XSS flaw can be used to escalate privileges (#1165774) - Traceback when adding zone with long name (#1164859) - Backup & Restore mechanism (#951581) - ignoring user attributes in migrate-ds does not work if uppercase characters are returned by ldap (#1159816) - Allow ipa-getkeytab to optionally fetch existing keys (#1007367) - Failure when installing on dual stacked system with external ca (#1128380) - ipa-server should keep backup of CS.cfg (#1059135) - Tracebacks with latest build for --zonemgr cli option (#1167270) - webui: use domain name instead of domain SID in idrange adder dialog (#891984) - webui: normalize idview tab labels (#891984)- ipa-csreplica-manage connect fails (#1157735) - error message which is not understandable when IDNA2003 characters are present in --zonemgr (#1163849) - Fix warning message should not contain CLI commands (#1114013) - Renewing the CA signing certificate does not extend its validity period end (#1163498) - RHEL7.1 ipa-server-install --uninstall Could not set SELinux booleans for httpd (#1159330)- Fix: DNS installer adds invalid zonemgr email (#1056202) - ipaplatform: Use the dirsrv service, not target (#951581) - Fix: DNS policy upgrade raises asertion error (#1161128) - Fix upgrade referint plugin (#1161128) - Upgrade: fix trusts objectclass violationi (#1161128) - group-add doesn't accept gid parameter (#1149124)- Update slapi-nis dependency to pull 0.54-2 (#891984) - ipa-restore: Don't crash if AD trust is not installed (#951581) - Prohibit setting --rid-base for ranges of ipa-trust-ad-posix type (#1138791) - Trust setting not restored for CA cert with ipa-restore command (#1159011) - ipa-server-install fails when restarting named (#1162340)- Update Requires on pki-ca to 10.1.2-4 (#1129558) - build: increase java stack size for all arches - Add ipaSshPubkey and gidNumber to the ACI to read ID user overrides (#891984) - Fix dns zonemgr validation regression (#1056202) - Handle profile changes in dogtag-ipa-ca-renew-agent (#886645) - Do not wait for new CA certificate to appear in LDAP in ipa-certupdate (#886645) - Add bind-dyndb-ldap working dir to IPA specfile - Fail if certmonger can't see new CA certificate in LDAP in ipa-cacert-manage (#886645) - Investigate & fix Coverity defects in IPA DS/KDC plugins (#1160756) - Deadlock in schema compat plugin (#1161131) - ipactl stop should stop dirsrv last (#1161129) - Upgrade 3.3.5 to 4.1 failed (#1161128) - CVE-2014-7828 freeipa: password not required when OTP in use (#1160877)- Do not check if port 8443 is available in step 2 of external CA install (#1129481)- Update Requires on selinux-policy to 3.13.1-4- Update to upstream 4.1.0 (#1109726)- Update to upstream 4.1.0 Alpha 1 (#1109726)- Add redhat-access-plugin-ipa dependency- Re-enable otptoken_yubikey plugin- Update to upstream 4.0.3 (#1109726)- Server installation fails using external signed certificates with "IndexError: list index out of range" (#1111320) - Add rhino to BuildRequires to fix Web UI build error- ipa-client-automount fails with incompatibility error when installed against older IPA server (#1083108)- Proxy PKI URI /ca/ee/ca/profileSubmit to enable replication with future PKI versions (#1080865)- When IdM server trusts multiple AD forests, IPA client returns invalid group membership info (#1079498)- Deletion of active subdomain range should not be allowed (#1075615)- PKI database is ugraded during replica installation (#1075118)- Unable to add trust successfully with --trust-secret (#1075704)- ipa-replica-install never checks for 7389 port (#1075165) - Non-terminated string may be passed to LDAP search (#1075091) - ipa-sam may fail to translate group SID into GID (#1073829) - Excessive LDAP calls by ipa-sam during Samba FS operations (#1075132)- Do not fetch a principal two times, remove potential memory leak (#1070924)- trustdomain-find with pkey-only fails (#1068611) - Invalid credential cache in trust-add (#1069182) - ipa-replica-install prints unexpected error (#1069722) - Too big font in input fields in details facet in Firefox (#1069720) - trust-add for POSIX AD does not fetch trustdomains (#1070925) - Misleading trust-add error message in some cases (#1070926) - Access is not rejected for disabled domain (#1070924)- Remove ipa-backup and ipa-restore functionality from RHEL (#1003933)- Display server name in ipa command's verbose mode (#1061703) - Remove sourcehostcategory from default HBAC rule (#1061187) - dnszone-add cannot add classless PTR zones (#1058688) - Move ipa-otpd socket directory to /var/run/krb5kdc (#1063850)- Lockout plugin crashed during ipa-server-install (#912725)- Fallback to global policy in ipa lockout plugin (#912725) - Migration does not add users to default group (#903232)- Mass rebuild 2014-01-24- Fix NetBIOS name generation in CLDAP plugin (#1030517)- Do not add krbPwdPolicyReference for new accounts, hardcode it (#1045218) - Increase default timeout for IPA services (#1033273) - Error while running trustdomain-find (#1054376) - group-show lists SID instead of name for external groups (#1054391) - Fix IPA server NetBIOS name in samba configuration (#1030517) - dnsrecord-mod produces missing API version warning (#1054869) - Hide trust-resolve command as internal (#1052860) - Add Trust domain Web UI (#1054870) - ipasam cannot delete multiple child trusted domains (#1056120)- Missing objectclasses when empty password passed to host-add (#1052979) - sudoOrder missing in sudoers (#1052983) - Missing examples in sudorule help (#1049464) - Client automount does not uninstall when fstore is empty (#910899) - Error not clear for invalid realm given to trust-fetch-domains (#1052981) - trust-fetch-domains does not add idrange for subdomains found (#1049926) - Add option to show if an AD subdomain is enabled/disabled (#1052973) - ipa-adtrust-install still failed with long NetBIOS names (#1030517) - Error not clear for invalid relam given to trustdomain-find (#1049455) - renewed client cert not recognized during IPA CA renewal (#1033273)- hbactest does not work for external users (#848531)- PKI service restart after CA renewal failed (#1040018)- Move ipa-tests package to separate srpm (#1032668)- Fix status trust-add command status message (#910453) - NetBIOS was not trimmed at 15 characters (#1030517) - Harden CA subsystem certificate renewal on CA clones (#1040018)- Mass rebuild 2013-12-27- Remove "Listen 443 http" hack from deployed nss.conf (#1029046) - Re-adding existing trust fails (#1033216) - IPA uninstall exits with a samba error (#1033075) - Added RELRO hardening on /usr/libexec/ipa-otpd (#1026260) - Fixed ownership of /usr/share/ipa/ui/js (#1026260) - ipa-tests: support external names for hosts (#1032668) - ipa-client-install fail due fail to obtain host TGT (#1029354)- Trust add tries to add same value of --base-id for sub domain, causing an error (#1033068) - Improved error reporting for adding trust case (#1029856)- Winsync agreement cannot be created (#1023085)- Installer did not detect different server and IPA domain (#1026845) - Allow kernel keyring CCACHE when supported (#1026861)- ipa-server-install crashes when AD subpackage is not installed (#1026434)- Update to upstream 3.3.3 (#991064)- Temporarily move ipa-backup and ipa-restore functionality back to make them available in public Beta (#1003933)- Server install failure during client enrollment shouldn't roll back (#1023086) - nsds5ReplicaStripAttrs are not set on agreements (#1023085) - ipa-server conflicts with mod_ssl (#1018172)- Reinstalling ipa server hangs when configuring certificate server (#1018804)- Deprecate --serial-autoincrement option (#1016645) - CA installation always failed on replica (#1005446) - Re-initializing a winsync connection exited with error (#994980)- Update to upstream 3.3.2 (#991064) - Add delegation info to MS-PAC (#915799) - Warn about incompatibility with AD when IPA realm and domain differs (#1009044) - Allow PKCS#12 files with empty password in install tools (#1002639) - Privilege "SELinux User Map Administrators" did not list permissions (#997085) - SSH key upload broken when client joins an older server (#1009024)- Remove dependency on python-paramiko (#1002884) - Broken redirection when deleting last entry of DNS resource record (#1006360)- Remove ipa-backup and ipa-restore functionality from RHEL (#1003933)- Replica installation fails for RHEL 6.4 master (#1004680) - Server uninstallation crashes if DS is not available (#998069)- Unable to remove replica by ipa-replica-manage (#1001662) - Before uninstalling a server, warn about active replicas (#998069)- Update to upstream 3.3.1 (#991064) - Update minimum version of bind-dyndb-ldap to 3.5- Fix replica installation failing on certificate subject (#983075)- Allow ipa-tests to work with older version (1.7.7) of python-paramiko- Prevent multilib failures in *.pyo and *.pyc files- ipa-server-install fails if --subject parameter is other than default realm (#983075) - do not allow configuring bind-dyndb-ldap without persistent search (#967876)- diffstat was missing as a build dependency causing multilib problems- Remove ipa-server-selinux obsoletes as upgrades from version prior to 3.3.0 are not allowed - Wrap server-trust-ad subpackage description better - Add (noreplace) flag for %{_sysconfdir}/tmpfiles.d/ipa.conf - Change permissions on default_encoding_utf8.so to fix ipa-python Provides- Update to upstream 3.3.0 (#991064)- Require slapi-nis 0.47.7 delivering a core feature of 3.3.0 release- Update to upstream 3.3.0 Beta 2 (#991064)- Update to upstream 3.2.2 - Drop ipa-server-selinux subpackage - Drop redundant directory /var/cache/ipa/sessions - Do not create /var/lib/ipa/pki-ca/publish, retain reference as ghost - Run ipa-upgradeconfig and server restart in posttrans to avoid inconsistency issues when there are still old parts of software (like entitlements plugin)- Update to upstream 3.2.1 - Drop dogtag-pki-server-theme requires, it won't be build for RHEL-7.0- Add OTP patches - Add patch to set KRB5CCNAME for 389-ds-base- Update to upstream 3.2.0 GA - ipa-client-install fails if /etc/ipa does not exist (#961483) - Certificate status is not visible in Service and Host page (#956718) - ipa-client-install removes needed options from ldap.conf (#953991) - Handle socket.gethostbyaddr() exceptions when verifying hostnames (#953957) - Add triggerin scriptlet to support OpenSSH 6.2 (#953617) - Require nss 3.14.3-12.0 to address certutil certificate import errors (#953485) - Require pki-ca 10.0.2-3 to pull in fix for sslget and mixed IPv4/6 environments. (#953464) - ipa-client-install removes 'sss' from /etc/nsswitch.conf (#953453) - ipa-server-install --uninstall doesn't stop dirsrv instances (#953432) - Add requires for openldap-2.4.35-4 to pickup fixed SASL_NOCANON behavior for socket based connections (#960222) - Require libsss_nss_idmap-python - Add Conflicts on nss-pam-ldapd < 0.8.4. The mapping from uniqueMember to member is now done automatically and having it in the config file raises an error. - Add backup and restore tools, directory. - require at least systemd 38 which provides the journal (we no longer need to require syslog.target) - Update Requires on policycoreutils to 2.1.14-37 - Update Requires on selinux-policy to 3.12.1-42 - Update Requires on 389-ds-base to 1.3.1.0 - Remove a Requires for java-atk-wrapper- Remove release from krb5-server in strict sub-package to allow for rebuilds.- Add a Requires for java-atk-wrapper until we can determine which package should be pulling it in, dogtag or tomcat.- Update to upstream 3.2.0 Beta 1- Update to upstream 3.2.0 Prerelease 1 - Use upstream reference spec file as a base for Fedora spec file- Rebuild for broken deps - Fix 389-ds-base strict dep to be 1.3.0.5 and krb5-server 1.11.1- Rebuild for broken deps in rawhide - Fix 389-ds-base strict dep to be 1.3.0.3- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild- Update to upstream 3.1.2 - CVE-2012-4546: Incorrect CRLs publishing - CVE-2012-5484: MITM Attack during Join process - CVE-2013-0199: Cross-Realm Trust key leak - Updated strict dependencies to 389-ds-base = 1.3.0.2 and pki-ca = 10.0.1- Remove redundat Requires versions that are already in Fedora 17 - Replace python-crypto Requires with m2crypto - Add missing Requires(post) for client and server-trust-ad subpackages - Restart httpd service when server-trust-ad subpackage is installed - Bump selinux-policy Requires to pick up PKI/LDAP port labeling fixes- Updated to upstream 3.1.0 GA - Set minimum for sssd to 1.9.2 - Set minimum for pki-ca to 10.0.0-1 - Set minimum for 389-ds-base to 1.3.0 - Set minimum for selinux-policy to 3.11.1-60 - Remove unneeded dogtag package requires- Update Requires on krb5-server to 1.11- Configure CA replication to use TLS instead of SSL- Updated to upstream 3.0.0 GA - Set minimum for samba to 4.0.0-153. - Make sure server-trust-ad subpackage alternates winbind_krb5_locator.so plugin to /dev/null since they cannot be used when trusts are configured - Restrict krb5-server to 1.10. - Update BR for 389-ds-base to 1.3.0 - Add directory /var/lib/ipa/pki-ca/publish for CRL published by pki-ca - Add Requires on zip for generating FF browser extension- Updated to upstream 3.0.0 rc 2 - Include new FF configuration extension - Set minimum Requires of selinux-policy to 3.11.1-33 - Set minimum Requires dogtag to 10.0.0-0.43.b1 - Add new optional strict sub-package to allow users to limit other package upgrades.- Require samba packages instead of obsoleted samba4 packages- Updated to upstream 3.0.0 rc 1 - Update BR for 389-ds-base to 1.2.11.14 - Update BR for krb5 to 1.10 - Update BR for samba4-devel to 4.0.0-139 (rc1) - Add BR for python-polib - Update BR and Requires on sssd to 1.9.0 - Update Requires on policycoreutils to 2.1.12-5 - Update Requires on 389-ds-base to 1.2.11.14 - Update Requires on selinux-policy to 3.11.1-21 - Update Requires on dogtag to 10.0.0-0.33.a1 - Update Requires on certmonger to 0.60 - Update Requires on tomcat to 7.0.29 - Update minimum version of bind to 9.9.1-10.P3 - Update minimum version of bind-dyndb-ldap to 1.1.0-0.16.rc1 - Remove Requires on authconfig from python sub-package- Rebuild against samba4 beta8- Rebuild against samba4 beta7- Adopt to samba4 beta6 (libsecurity -> libsamba-security) - Add dependency to samba4-winbind- Updated to upstream 3.0.0 beta 2- Updated to current upstream state of 3.0.0 beta 2 development- Rebuild against samba4 beta4- Updated to upstream 3.0.0 beta 1- Updated to upstream 2.2.0 GA - Update minimum n-v-r of certmonger to 0.53 - Update minimum n-v-r of slapi-nis to 0.40 - Add Requires in client to oddjob-mkhomedir and python-krbV - Update minimum selinux-policy to 3.10.0-110- Update to upstream 2.2.0 beta 1 (2.1.90.rc1) - Set minimum n-v-r for pki-ca and pki-silent to 9.0.18. - Add Conflicts on mod_ssl - Update minimum n-v-r of 389-ds-base to 1.2.10.4 - Update minimum n-v-r of sssd to 1.8.0 - Update minimum n-v-r of slapi-nis to 0.38 - Update minimum n-v-r of pki-* to 9.0.18 - Update conflicts on bind-dyndb-ldap to < 1.1.0-0.9.b1 - Update conflicts on bind to < 9.9.0-1 - Drop requires on krb5-server-ldap - Add patch to remove escaping arguments to pkisilent- Update to upstream 2.2.0 alpha 1 (2.1.90.pre1)- Force to use 389-ds 1.2.10-0.8.a7 or above - Improve upgrade script to handle systemd 389-ds change - Fix freeipa to work with python-ldap 2.4.6- Fix ipa-replica-install crashes - Fix ipa-server-install and ipa-dns-install logging - Set minimum version of pki-ca to 9.0.17 to fix sslget problem caused by FEDORA-2011-17400 update (#771357)- Allow Web-based migration to work with tightened SE Linux policy (#769440) - Rebuild slapi plugins against re-enterant version of libldap- Allow longer dirsrv startup with systemd: - IPAdmin class will wait until dirsrv instance is available up to 10 seconds - Helps with restarts during upgrade for ipa-ldap-updater - Fix pylint warnings from F16 and Rawhide- Update to upstream 2.1.4 (CVE-2011-3636)- Update SELinux policy to allow ipa_kpasswd to connect ldap and read /dev/urandom. (#759679)- Fix wrong path in packaging freeipa-systemd-upgrade- Introduce upgrade script to recover existing configuration after systemd migration as user has no means to recover FreeIPA from systemd migration - Upgrade script: - recovers symlinks in Dogtag instance install - recovers systemd configuration for FreeIPA's directory server instances - recovers freeipa.service - migrates directory server and KDC configs to use proper keytabs for systemd services- Rebuilt for glibc bug#747377- clean up spec - Depend on sssd >= 1.6.2 for better user experience- Fix Fedora package changelog after merging systemd changes- Fix postin scriplet for F-15/F-16- 2.1.3- Default to systemd for Fedora 16 and onwards- Update to upstream 2.1.0- Fix bug #702633- Update minimum selinux-policy to 3.9.16-18 - Update minimum pki-ca and pki-selinux to 9.0.7 - Update minimum 389-ds-base to 1.2.8.0-1 - Update to upstream 2.0.1- Update to upstream GA release - Automatically apply updates when the package is upgraded- Update to upstream freeipa-2.0.0.rc2 - Set minimum version of python-nss to 0.11 to make sure IPv6 support is in - Set minimum version of sssd to 1.5.1 - Patch to include SuiteSpotGroup when setting up 389-ds instances - Move a lot of BuildRequires so this will build with ONLY_CLIENT enabled- Set the N-V-R so rc1 is an update to beta2.- Set minimum version of sssd to 1.5.1 - Update to upstream freeipa-2.0.0.rc1 - Move server-only binaries from admintools subpackage to server- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Set min version of 389-ds-base to 1.2.8 - Set min version of mod_nss 1.0.8-10 - Set min version of selinux-policy to 3.9.7-27 - Add dogtag themes to Requires - Update to upstream freeipa-2.0.0.pre2- Remove unnecessary moving of v1 CA serial number file in post script - Add Obsoletes for server-selinxu subpackage - Using git snapshot 442d6ad30ce1156914e6245aa7502499e50ec0da- Prepare spec file for release - Using git snapshot 80e87e75bd6ab56e3e20c49ece55bd4d52f1a503- Re-arrange doc and defattr to clean up rpmlint warnings - Remove conditionals on older releases - Move some man pages into admintools subpackage - Remove some explicit Requires in client that aren't needed - Consistent use of buildroot vs RPM_BUILD_ROOT- Moved directory install/static to install/ui- Remove dependency on nss_ldap/nss-pam-ldapd - The official client is sssd and that's what we use by default.- Remove radius subpackages- Set minimum pki-ca and pki-silent versions to 9.0.0- Drop BuildRequires on mozldap-devel- Add Requires on krb5-pkinit-openssl- Add ipa-host-net-manage script- Add ipa init script- Set minimum level of 389-ds-base to 1.2.7 for enhanced memberof plugin- remove ipa-fix-CVE-2008-3274- Remove duplicate %files entries on share/ipa/static - Add python default encoding shared library- Drop requires on python-configobj (not used any more) - Drop ipa-ldap-updater message, upgrades are done differently now- Drop conflicts on mod_nss - Require nss-pam-ldapd on F-14 or higher instead of nss_ldap (#606847) - Drop a slew of conditionals on older Fedora releases (< 12) - Add a few conditionals against RHEL 6 - Add Requires of nss-tools on ipa-client- Set minimum version of certmonger to 0.26 (to pck up #621670) - Set minimum version of pki-silent to 1.3.4 (adds -key_algorithm) - Set minimum version of pki-ca to 1.3.6 - Set minimum version of sssd to 1.2.1- Add BuildRequires for authconfig- Bump up minimum version of python-nss to pick up nss_is_initialize() API- Removed python-asset based webui- Change Requires from fedora-ds-base to 389-ds-base - Set minimum level of 389-ds-base to 1.2.6 for the replication version plugin.- Drop Requires of python-krbV on ipa-client- Load ipa_dogtag.pp in post install- Set minimum level of sssd to 1.1.1 to pull in required hbac fixes.- No need to create /var/log/ipa_error.log since we aren't using TurboGears any more.- Fixed share/ipa/wsgi.py so .pyc, .pyo files are included- Added Require mod_wsgi, added share/ipa/wsgi.py- Require python-wehjit >= 0.2.2- Add sssd and certmonger as a Requires on ipa-client- Require python-wehjit >= 0.2.0- Add ipa-rmkeytab tool- Set minimum of python-pyasn1 to 0.0.9a so we have support for the ASN.1 Any type- Remove v1-style /etc/ipa/ipa.conf, replacing with /etc/ipa/default.conf- Add bash completion script and own /etc/bash_completion.d in case it doesn't already exist- Remove ipa_webgui, its functions rolled into ipa_httpd- Removed python-cherrypy from BuildRequires and Requires - Added Requires python-assets, python-wehjit- Added httpd SELinux policy so CRLs can be read- Move ipalib to ipa-python subpackage - Bump minimum version of slapi-nis to 0.15- Set 0.14 as minimum version for slapi-nis- Add Requires: python-nss to ipa-python sub-package- Remove the IPA DNA plugin, use the DS one- Build radius separately - Fix a few minor issues- Replace TurboGears requirement with python-cherrypy- rebuild with new openssl- Fix SELinux code- Fix breakage caused by python-kerberos update to 1.1- New upstream release 1.2.1- Rebuild for Python 2.6- Respin after the tarball has been re-released upstream New hash is 506c9c92dcaf9f227cba5030e999f177- Conditionally restart also dirsrv and httpd when upgrading- Update to upstream version 1.2.0 - Set fedora-ds-base minimum version to 1.1.3 for winsync header - Set the minimum version for SELinux policy - Remove references to Fedora 7- Fix for CVE-2008-3274 - Fix segfault in ipa-kpasswd in case getifaddrs returns a NULL interface - Add fix for bug #453185 - Rebuild against openldap libraries, mozldap ones do not work properly - TurboGears is currently broken in rawhide. Added patch to not build the UI locales and removed them from the ipa-server files section.- Add call to /usr/sbin/upgradeconfig to post install- Update to upstream version 1.1.0 - Patch for indexing memberof attribute - Patch for indexing uidnumber and gidnumber - Patch to change DNA default values for replicas - Patch to fix uninitialized variable in ipa-getkeytab- Set fedora-ds-base minimum version to 1.1.0.1-4 and mod_nss minimum version to 1.0.7-4 so we pick up the NSS fixes. - Add selinux-policy-base(post) to Requires (446496)- Add missing entry for /var/cache/ipa/kpasswd (444624) - Added patch to fix permissions problems with the Apache NSS database. - Added patch to fix problem with DNS querying where the query could be returned as the answer. - Fix spec error where patch1 was in the wrong section- Added patch to fix problem reported by ldapmodify- Fix Requires for krb5-server that was missing for Fedora versions > 9 - Remove quotes around test for fedora version to package egg-info- Update to upstream version 1.0.0- Pull upstream changelog 722 - Add Conflicts mod_ssl (435360)- Pull upstream changelog 698 - Fix ownership of /var/log/ipa_error.log during install (435119) - Add pwpolicy command and man page- Pull upstream changelog 678 - Add new subpackage, ipa-server-selinux - Add Requires: authconfig to ipa-python (bz #433747) - Package i18n files- Pull upstream changelog 641 - Require minimum version of krb5-server on F-7 and F-8 - Package some new files- Marked with wrong license. IPA is GPLv2.- Ensure that /etc/ipa exists before moving user-modifiable html files there - Put html files into /etc/ipa/html instead of /etc/ipa- Pull upstream changelog 608 which renamed several files- package the sessions dir /var/cache/ipa/sessions - Pull upstream changelog 597- Updated upstream pull (596) to fix bug in ipa_webgui that was causing the UI to not start.- Included LICENSE and README in all packages for documentation - Move user-modifiable content to /etc/ipa and linked back to /usr/share/ipa/html - Changed some references to /usr to the {_usr} macro and /etc to {_sysconfdir} - Added popt-devel to BuildRequires for Fedora 8 and higher and popt for Fedora 7 - Package the egg-info for Fedora 9 and higher for ipa-python- Added auto* BuildRequires- Unified spec file- Fixed License in specfile - Include files from /usr/lib/python*/site-packages/ipaserver- Version bump for release- Preverse mode on ipa-keytab-util - Version bump for relase and rpm name change- Broke invididual Requires and BuildRequires onto separate lines and reordered them - Added python-tgexpandingformwidget as a dependency - Require at least fedora-ds-base 1.1- Version bump for release- Add dep for freeipa-admintools and acl- Add dependency for python-krbV- Require mod_nss-1.0.7-2 for mod_proxy fixes- Convert to autotools-based build* Fri Sep 7 2007 Karl MacMillan - 0.3.0-1 - Added support for libipa-dna-plugin- Added support for ipa_kpasswd and ipa_pwd_extop- Abstracted client class to work directly or over RPC- Add mod_auth_kerb and cyrus-sasl-gssapi to Requires - Remove references to admin server in ipa-server-setupssl - Generate a client certificate for the XML-RPC server to connect to LDAP with - Create a keytab for Apache - Create an ldif with a test user - Provide a certmap.conf for doing SSL client authentication- Initial rpm version/bin/shfreeipa-server-common  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~     4.9.12-5.module_el8+551+ca600d0e4.9.124.9.12-5.module_el8+551+ca600d0e4.9.12        ipa-kdc-proxy.confipa-pki-proxy.confipa-rewrite.confipa.confipacustodiahtmlssbrowser.htmlunauthorized.htmlkdcproxyipa-kdc-proxy.confkdcproxy.confipa-ext.confipa-options-ext.confipa.confipa-custodia.serviceipa.confipa-server-commonContributors.txtREADME.md05rfc2247.ldif15rfc2307bis.ldif15rfc4876.ldif60basev2.ldif60basev3.ldif60basev4.ldif60certificate-profiles.ldif60ipaconfig.ldif60ipadns.ldif60ipapk11.ldif60kerberos.ldif60samba.ldif61kerberos-ipav3.ldif65ipacertstore.ldif65ipasudo.ldif70ipaotp.ldif70topology.ldif71idviews.ldif72domainlevels.ldif73certmap.ldifadviselegacypam.conf.nss_pam_ldapd.templatepam.conf.sssd.templatepam_conf_sshd.templatesssd.conf.templateanon-princ-aci.ldifautomember.ldifbind.ipa-ext.conf.templatebind.ipa-logging-ext.conf.templatebind.ipa-options-ext.conf.templatebind.named.conf.templatebind.openssl.cnf.templatebind.openssl.cryptopolicy.cnf.templatebootstrap-template.ldifca-topology.uldifcertmap.conf.templatecustodia.conf.templatedefault-aci.ldifdefault-hbac.ldifdefault-smb-group.ldifdefault-trust-view.ldifdelegation.ldifdna.ldifdns.ldifdnssec.ldifdomainlevel.ldifds-ipa-env.conf.templateds-nfiles.ldifenrollment-conf.ldifentryusn.ldiffreeipa-server.templategraceperiod-conf.ldifgssapi.logingssproxy.conf.templatehost_nis_groups.ldifhtmlca.crtkrb.conkrb5.inikrbrealm.conssbrowser.htmlunauthorized.htmlipa-dns-conf.ldifipa-extdom-extop-conf.ldifipa-httpd-wsgi.conf.templateipa-httpd.conf.templateipa-kdc-proxy.conf.templateipa-pki-proxy.conf.templateipa-rewrite.conf.templateipa-sidgen-conf.ldifipa-sidgen-task-conf.ldifipa-sidgen-task-run.ldifipa-topology-conf.ldifipa-winsync-conf.ldifipa.conf.templateipaca_customize.iniipaca_default.iniipaca_softhsm2.iniipakrb5.augkdc.conf.templatekdc_extensions.templatekdc_req.conf.templatekdcproxy-disable.uldifkdcproxy-enable.uldifkdcproxy.wsgikerberos.ldifkrb.con.templatekrb5.conf.templatekrb5.ini.templatekrbrealm.con.templateldbm-tuning.ldiflockout-conf.ldifmanaged-entries.ldifmaster-entry.ldifmemberof-conf.ldifmemberof-task.ldifmigrationindex.htmlmigration.pymodrdn-conf.ldifmodrdn-krbprinc.ldifnis-update.uldifnis.uldifopendnssec_conf.templateopendnssec_kasp.templatepki-acme-configsources.conf.templatepki-acme-database.conf.templatepki-acme-engine.conf.templatepki-acme-issuer.conf.templatepki-acme-realm.conf.templateprofilesIECUserRoles.cfgKDCs_PKINIT_Certs.cfgREADMEacmeIPAServerCert.cfgcaIPAserviceCert.UPGRADE.cfgcaIPAserviceCert.cfgpw-logging-conf.ldifpwd-extop-conf.ldifrange-check-conf.ldifreferint-conf.ldifreplica-acis.ldifreplica-automember.ldifreplica-prevent-time-skew.ldifrepoint-managed-entries.ldifsasl-mapping-fallback.ldifschema-update.ldifschema.dREADMEsmb.conf.registry.templatesmb.conf.templatesudobind.ldiftopology-entries.ldifuicssbootstrap-datepicker3.min.cssipa.csspatternfly.cssfavicon.icoie.cssimagesfacet-tab-off.pngfacet-tab-on.pngindex.htmlipa.cssjsdojodojo.jsfreeipaapp.jscore.jslibsbootstrap-datepicker.jsbootstrap.jsbrowser.jsd3.jsjquery.jsjquery.ordered-map.jsjson2.jsloader.jspatternfly.jsqrcode.jspluginsreset_password.htmlsync_otp.htmlunique-attributes.ldifupdates05-pre_upgrade_plugins.update10-config.update10-db-locks.update10-enable-betxn.update10-ipapwd.update10-rootdse.update10-selinuxusermap.update10-uniqueness.update19-managed-entries.update20-aci.update20-autobind.update20-default_password_policy.update20-dna.update20-enable_dirsrv_plugins.update20-host_nis_groups.update20-indices.update20-ipaservers_hostgroup.update20-nss_ldap.update20-replication.update20-sslciphers.update20-syncrepl.update20-user_private_groups.update20-uuid.update20-whoami.update21-ca_renewal_container.update21-certstore_container.update21-replicas_container.update25-referint.update30-ipservices.update30-provisioning.update30-s4u2proxy.update37-locations.update40-automember.update40-certprofile.update40-delegation.update40-dns.update40-idp.update40-otp.update40-realm_domains.update40-replication.update40-vault.update41-caacl.update41-lightweight-cas.update45-roles.update50-7_bit_check.update50-dogtag10-migration.update50-groupuuid.update50-hbacservice.update50-ipaconfig.update50-krbenctypes.update50-nis.update55-pbacmemberof.update59-trusts-sysacount.update60-trusts.update61-trusts-s4u2proxy.update62-ranges.update71-idviews-sasl-mapping.update71-idviews.update72-domainlevels.update73-certmap.update73-custodia.update73-subid.update73-winsync.update75-user-trust-attributes.update80-schema_compat.update81-externalmembers.update90-post_upgrade_plugins.updateuser_private_groups.ldifuuid-conf.ldifuuid.ldifvault.ldifversion-conf.ldifwsgiwsgi.pyplugins.pyipa-server-commonCOPYINGipabackupcertsgssproxypasswdspki-capublishprivatesysrestoresysupgradekdcproxyipa/etc/httpd/conf.d//etc//etc/ipa//etc/ipa/html//etc/ipa/kdcproxy//etc/named//etc/systemd/system/httpd.d//usr/lib/systemd/system//usr/lib/tmpfiles.d//usr/share/doc//usr/share/doc/ipa-server-common//usr/share/ipa//usr/share/ipa/advise//usr/share/ipa/advise/legacy//usr/share/ipa/html//usr/share/ipa/migration//usr/share/ipa/profiles//usr/share/ipa/schema.d//usr/share/ipa/ui//usr/share/ipa/ui/css//usr/share/ipa/ui/images//usr/share/ipa/ui/js//usr/share/ipa/ui/js/dojo//usr/share/ipa/ui/js/freeipa//usr/share/ipa/ui/js/libs//usr/share/ipa/updates//usr/share/ipa/wsgi//usr/share/licenses//usr/share/licenses/ipa-server-common//var/lib//var/lib/ipa//var/lib/ipa/pki-ca//var/named/dyndb-ldap/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protectioncpioxz2aarch64-redhat-linux-gnu                                  emptydirectoryHTML document, ASCII textcannot open `/builddir/build/BUILDROOT/ipa-4.9.12-5.module_el8+551+ca600d0e.aarch64/etc/ipa/kdcproxy/ipa-kdc-proxy.conf' (No such file or directory)ASCII textcannot open `/builddir/build/BUILDROOT/ipa-4.9.12-5.module_el8+551+ca600d0e.aarch64/etc/named/ipa-ext.conf' (No such file or directory)cannot open `/builddir/build/BUILDROOT/ipa-4.9.12-5.module_el8+551+ca600d0e.aarch64/etc/named/ipa-options-ext.conf' (No such file or directory)cannot open `/builddir/build/BUILDROOT/ipa-4.9.12-5.module_el8+551+ca600d0e.aarch64/etc/systemd/system/httpd.d/ipa.conf' (No such file or directory)UTF-8 Unicode textASCII text, with very long linesBSD makefile script text with ".include", ASCII textPython script, ASCII text executableASCII text, with CRLF line terminatorsXML 1.0 document, ASCII textPNG image data, 1 x 97, 8-bit/color RGBA, non-interlacedPNG image data, 1 x 97, 8-bit/color RGB, non-interlacedASCII text, with very long lines, with no line terminatorscannot open `/builddir/build/BUILDROOT/ipa-4.9.12-5.module_el8+551+ca600d0e.aarch64/var/lib/ipa/pki-ca/publish' (No such file or directory)cannot open `/builddir/build/BUILDROOT/ipa-4.9.12-5.module_el8+551+ca600d0e.aarch64/var/named/dyndb-ldap/ipa' (No such file or directory)utf-84f17275aebdc1a4bd24db746a93e406139c6a7f9e551d1b8f5eaab6c91d11b1fidm:DL1:820230717180228:5986f621?7zXZ !#,幥] b26_D+lbLΉޖ@p?[{NX\Osq7R<煀fj(WSH2k%܉$󛄌5[+0z8_؞l4BҏRȷ2uH~-DՉZs9TOc-z/UkGRRda_ƽ,mxs@ WCVn@^_R`k{wv i,2je6mAEF)3#!l7k3h3&!,C&%UKNɧFC A(PЍQ@8U@%z,3G{_`هRb-Yj0䎈yG&E0/E0^E ZHWC|ڛ %3's5ɕCݍaqYzmҕ{L{glOKfa_ ~h;YNσt]<7:46Hby)P1ZS!Psl_&=,u H>A%Nn:cVZ-Ӛ7]Q HoYm*T5ܙh5-iQ#n®-K/Pa&j^<`SϪÒts$?)1uDQOOL\%^]mbʇ^}öU @D%%sx`>9E$(` %9cobo#AoF-Nt vw['/c^92?0e9%EAq2ԙ<y=)QcT3 nTZ>uEוJ̛D3^2A QM#K>$QҞlNm_}SNj\\O7H8Q@ 1t9B5ͰUe皍oxļx{mP̥. %P`I=thz0=PդT@l0Xr 83p@WLm'=]YWH_o>cK.-/'SDNl()oW5HYS~pSρ!^wU2 žXLy[aH4Y7i _E]'X Kz}> ;.v[G "<2YĸˍET7גyYvk/-~fDYϼG &,V7Q'Λ,j *nG[#n9M;s\np6M@,Kp/g2d=Q2axg W7/ 0E Ix<)83}F3͔;ރO>|%& | GfiUkjDԀg7qkgؠ"caS//լE&aڰ]ʵN#;-{lg*ӊby =,lYr;HݶX? 1j+,B7'kcMN"z2E|D!>8,e0jwN-l;(蝉1]Wk{bXR~պWkps@>ş$G5ч `P+С#cLЂ y"s=%al"'Y6ǖɵ; |'B$~>n_i}Td/Yd*;mb}|h$.J@% w(oZ O"7$zWfzsrP8pAnqߎ {,xj(C0SU@%;kqENcW26Ж=4L?4`C(q]>¸toCf*$a%TADEThzꄬEdUnm1׭xS8i$^= ܂4W};q z)fTe4kԧۻ*<v:=BO5 ,y ڵK<$ Zn-D1+%La-};yo};b{=ؠ2C۴#1\/r>3SbckNi!ouH|Unn C+sUN@'PI9$`oz|@>k4c ׾2.[X$4ꃱ:%lF6H&J _YS7y2(eL+[~O^w,n#ǎg ӵƚy<(9$D.epcHLiHa>Ħ%F$̘TQOTA4'E_?:FPpFS]R!p-}GhZX4o }!VΖAIP{Ma 3)0ޮLK{5w4@yAE_L'gjn(&+?*>$'`:(&sH@ۨ b~F?2{nԝ#I/8b]B]@*X#mRD [kxt 7Cd0G2~s4 6E="fɏb ﾋGTd~yUD?Vb~ƿw0s?_ɎhELXY3=Pis~>_ekmZ]$C2|W^BfXy5iۊf߹`sCt`5Zr}7 X|!R$oLDJd a(ɀ1ׇ㵗<3f""N&s^cQ>^D0aWh H7D@2*6TjK@2-eoRby"N,Ce(!${Z:"dl_5Ox=>M_d>3h!}|Uth`|4'eYo;^LV1e6dђ|3} dUSD$<Za  *|@4C(kD-ƥ- EOKhSc`j .|i̗:Ora) !ʙx?Kl&`JFbf)UJw)UIC rOs{BtWsy BlagYfY; r n+_W͈q lU):3%PF\q=y;9|U5(՘T0˺5ņ nlKj jHQi-V݁<WTsNr3o|\4Y$3 NyE)tK jqnsN'cbVN޹̓Z<K3e tz:2~6mή{Rg:0_s VrϞc:n1Kk?W3HZƞT}b].<7# A< u Y;[AVye+QЫ(`"Hڏ*M-݈#<2O/0g+kWah[ [0(" Hvm$zC;^At5Ҫd{ Iz̆n(J֯ ֈl=5I\HL+&P5ӣv70\]ZYAoJfXcpu&lgHG t#bUdzS3Qމ{ېH>]d5#%um< ۩y=Y;t5 >n"N8s6Fwr~A Ze r.@}y3`e2?=Ĩێl+Fw'tx' < &Ӵ`Xm]dZ4*Ro^`8c-,VF Yͦa'maYoqf~ˍjY[DŽE҄2 g+}]i))>sQE 8,i\dTOiwtu4ytWuj)\O<_XoVe(EO[JTYD3Q!b !}{=R&xh~Br^EoN -ݦ"4@p 2 ? چ'eKdߡl_+JAg.eID?~ril?J⍈^¥8ޚ̬囹9Ge(jk4̟@\yN(c"yhJ PꘜYg3Fjkd+VU5Zh}CV}i]{jd缂Zt:)_,q? kb\~lmz^wf3gh/)a H_ҳ6w"ģ=`X#U[6j{-ݞW?+ bt/C SFЧ0 uIf،G$̚S*y ѥF2EFKXAAc;8*=ZZW]HԼ__!ߩ+GޛtL-X;ѴD*L`8r2[ýH kJM6 $C^^j˥YhekW6k}먫圇 G)KY -l<`pj'7ޯ)v=hew8[ƚ+yFh(JD'(H~z4Y<G~ In%1QzmRT@w 7gn_ю Lz)*Q+s5D!9J7j6̄W_2Tt+o!8Q@$n*[C1ǚ=;>*tQ$*3PWAR^ӧ(|;4t] b$԰ꍂz˽|X^!3nMkUOïDU)cCoˍ.ȡ68Q/Lp#5o𽻑r!i$$e᎒?.x4>>Z]fCQI/R]@QrثQO?{ӜvډUcEpNpOYPkþx aԨIwP4/ |k_FO9g4o Q4BqrZ*3Po  pO혃ʰl'fq}іXrBZ_V|kC,kF, PRm?Ov|aP\o aE$~% Ebn:*_exM6oZֺ'/R#m}IY8D&l M PONXl{b7f7]֚i|Q(<1_CLsI&5\,::ĉ|?a.N̈ۿA'_ݱϙ F=|IXB iP0CzTg.GUOytFdλCEMarb><W9d"(!<$ܲS 6=(Ӡ0$h-E2.>H@ɰLG9"y[`ϺXKaO>p0y?iT6dcD`TzBQJq)P)H1%vEXXY'Wm%0~Z.[ Z].!:d;\OΉtJc]h\Mw<@ Rp{jŖ~> ܂5%E0'>*9NnhH 6}c>n>1*\lȅSpHXE,e<3rv{3:cӷ>*APP*PTf1!9LmO,|f1uk^nXnugg^&zSӱs;JՉ<>WZ&Q`Znle\&ߋ 1Iۤ~ɝP6_8~{yZg:突dfJV >?- HYJS$m)P9[F~Ѝӗ;d}X Y1nkrL&1J[ (3fIt%`$e%ѦrB7=OG0K&r4by*H_, 3,N[蝤pjZ>"LmZ/A2iR ?T,_l#2\zkKyR@ #9 pQX 9usE||M+&X6^] I"{;+vۂ,U' [RŶTsRvWJGàR;78lDq[oN_SF_MC,n!Cʉ~slg^Z{2)?_~'G̋tqnxOD bӻVS(홼+Cn҈\ܦJ{@3QE]zțƹ@w]ilqJ8xB!Hc.^5f>[:Xޓhx i)&t$}hb>̾R"j_X+.ц>7B%}aUPVKkuӱygƃb_ 咧̘S(-S }miҰ75~[7{[R=c>5^)*ƠQx (A`c\Dsn":P,IH~V=>D-Mx}ÖX㒘C!e>T |NLf|ZC7{pؖ 'g, ~(;gEu 6a".gCIΉUBCw^<(-$E;COC[%GD=%p"kyz%"l ot#+2wo(甉9k b)xdXW'y)%$[LFΓ3=0`] Ɖ-+qrA rLAUᦣnYe=sNN w}qϼ`habF6݊7<{ݚ"`Ɖvʅ%r齍@Izy3o1W&4nq>J f3vӼI{X .MFsgnIV#'МiV=S<xFaoÖ5XB􍻱FhSLMϰIaSA僿j䜟CvSu0(] :V;w X[B1^M&龜)oʐL+R%mvn/s`0"H}ϸbs٭hXa-V|LV5;'(L i!Cdx\8mh݌p]4) \rs\ \|YXyʉo6[!>?(Eɥfƃ)'f?լ&n,+#Q,=Ձl*_A/DΆwWN$Xr2F/\erыwt5Syw3pSDhrC $GGs,A͛( F;B>=gwr86%u_vLW: eE_x61k,(j$_eD ˸MBpy?1ݫ ,7hkEg]s2ecp\W'׵P)hn͓NB[+tZU (A:Y|ԟ/(8wI-^?{.}Ew|k7ix`KEMܦvleS;,h惋 `tp~[٠,(n(I3'Ib ;u,0G; Pjը&toz+3~ys`ڳrf`o6C/BSѐ/^ߪ6zocLנ]ep'Z{}-D.й&2?E ؃RۏVWw|OЉLXDEdm 3Hu*P>Pvͷ|lڏhXް/A;o)%ߝa\-S)4ϔ*C22"9f{Z 4CŮUz̀sQ7DحL2>} 뽩/>!| z*V1LYwJՐkEprX+1ʫ?0JCB?ö󅹺(ޛЯI4) 7_.NHbEGUO{(L6ƧP4`A`s:Y5 m 6}^aݩۧ[&xo q}L{矹6-z8‰]Š^U[R{~v/C`uӏU'7=i5NԾ㻝EUD=Zg867=V%8ӤJY_9LY؂-X*j>A9ywe{n'˳m>t:qL>ݔ]s;!ϺD VMр*jb|^{0\0ase:z\55e'sd~.׃S AaHNܿ%@ߪ[W06P tPErҡlR}ͪ& DZyg(u(b("_i3G2=y8Y.ބD7i{@m};M~IKm`kOx;s^W4Z W.Vܵp>BLg`Qǯ]`$mh|o0K3^~ON[mό# S,{޹ ;fNw a\XƖ LtǭƂ׸ls.N& 򦵎ǕJ+tF{]1NU oRE*& ?Ct`j>n &.]PLBI xz_l%Ԃ zm:$ø39)%f98me*`F 8蓔P?0/qywyUwv]<яbKSځ\MYVwsƛQTc,Y*b߬pǑ?9!TJoG/+GS O̳>ȏ,Cu9#gS0*ē#\'3FGR[Z;u=:MPM1z#g%6#z`_mBo\'尾F/"'i'M(L d`>c2q*PnzQKKHDz}]0cT낿D\RbK`P'a-o4HԪĎ** =$gSi+oHoHjBlbjqꤞ`Pٽ=$Wb9Qs.tZ\wT@ݾ OLY}ku JJ ?cW{}Us?ci脺S20&fWVvޖ@ep䊼YqdvY/9~̕\8#d2$r poupx!чlVPۅJB$%9dJG|xFXCH!c4q$,akӱ-c29CaV~L';V548SeϒܘkD Ao]5 1^y5\RzN gfPgBK!Cc3~ƶ8Sg=ê5оPT%p.dKVϳ~4Ϯ1$'ժl( 󰽽Aσ$HMc>_R79Rd`Lx!~S,W>zS]6ckfIܼ'=v[ [(Z vCI7Fg3}GB9SmБ(x|ǝx"]z\X++`aRNy_ 6!rU~CR@{cxW?C;1gYWhs{+{LASW6[}q{  vW}в{]ZKą93(aۄ%a9]$o|b똢ONk`3+wu4g8T܅+ecN=QJI[M:#+"#cP)rߪOOPLg$E9 SҾ'URjj@Er:rd @CP}VA6fw:sQRh]-Eֻzv9l)uǽ2iup efBݭy0w/$,zK61hVn$ W/tt2oo%oS )gAF+%T$Vy|cv;Ois#q{#@kI2F6 7dH%l!5Sgoz(.oHSZ&_r-Kdf;~6Xp %9uٜ-nz[ 7I8"<[ݝSSn\E(\0ntg`,(SqXJ"u~7tT,;LNNLMpQ};1QԽ^ܮUv,KdJwVxVUnx{فSjSqtP l/>>NP ޓjQ7nt LoN*}<ѪK%`I(<j#<)Y^}Dc4OXx(1]mnĵ,j҆Yrt֥q@?%) KX~U\I]֯نm\5[~KQ`9OV\(w rO{UfQ<9K5[,mWZƸbS:+Ua^8T3CqX?<3,Y.e _>rI FlW'\2& h~JtTGm,JϊP[֑WRX_"=ɵzη;AГq8;Saҁ1Nvi$a]KOK\c%co`|YPf v`;Q~ZMLyCTLlM2bk C+մ cakrS,c>{ 7189h ʟ_ݥEىZg_.koGItO"B蒌mK.r)@`;G-~|/mKY-!던"LY#Nvl=CILx=0PBAEg`+ Ԍr3q-3>x$玈A"%irv7hRCK2ȜwՍzb`&Կ42Hʎ+UB)D/:Dϋ@Z39D{E|_ y:D [Ͱ, x!-H9`. sd7e#ޱYkT%O(iK: hfB3^.Rbf2[2!@!~Wy<\B&+˄G/@cJl;*w1ϩPK-TA0;BE=oȓZq֩>]QI7 Rs~Xڞ.$!j[T)O3q]ZXf^~ 'rjt!.\8//h8yh]+@@$hg}=֚FcKhussߴF w=7Bl/Hˌ 1d(r 7\B|zݓS2wà@ kqHT=هiJԐJ {u.חjV.ŬA}3.AuJK":eSh0oygfKvs@z::qa8Zc"yǮ,ސSPč? =ӻa5݄סn1`HtHΓ#Ƽ@('Ky֩r pIj`@$fpZ#Hf-ayOu%u뮴x"3Nmh{7t^hd#5׊K/Ο|?ހ/;rW>m@)+~gyb ֚C cвSc9d_\__!pQn->H\VfS` k؞[Ga4ZdҤU$ 'Y_YlYQ c>jYKk+mc*Lr$ӎġYYgDՃ@^J\♾=r#>b iWkO Ja@4Pɥф+{ÆZo~KwBQ2Cw>gf189U kzjc_3'ʔJ٫RZ 6 uEF *s1Em v Šv+7tٹ:]ͤ.O$O#`׷g +eDuwx$ނ;2qԡ(6ʏ` m^!*5#IB[:RDBMޮ5hBl9eQ,45fGBS/j).( +pقqoѝdgOh rL#"|;1—@-s*OF ?-Lp6@(LA0i Z( ܂yao鱞4kE%?(rK*VfImw҆p@xe>wkV'ucR^11Jjdn\†MqGdy>˵SR2s*߬dVuc^4AJ?ZdNAJϔ\zH:L kQ`{DX% be NN*Q06v[ E=C$t!v'C ]$x(-4z3n( l!oY V _஦.x2(f@&xrb3r[BičEvTOCu4KArSR0K `GueL~ (+IOl-1]\H>yKóDN0)ܠq%/72["f9[;?.2@Z5jzm@:ўso_*~}mYhgz&51zn2~X;j3hL(>e@N;2Yt.+`:g\GP^EuMJ3dG~9#*%Ka!Huˌ &[uuGL3yR{!U[LcI5suN>K+@)^5 G p -F}s6:{lR.|sã&oEqbBFO\=[|`y[Te?D58B-r3v ~^@}ʆ.⮢'&D{ՓihGW wSjg[XcOJ6(7BsF8ﭏXZHv`]<=5ԟe1ױ9CٞT_$Q~-Oh 8_1Zhhp7DC#pJ.u^3w]9&agښ|+Ww7 g n]\Au+;2E+2I^{p`FB AYenRo)]kj<4ާtq km \*bu)x}zf!$׋6Vt[o$ V,L&[kDSj&#OoOimĺm!9@<9 0#\KP)Ѥt?HơhDZ(NPHѸJ鏏YM|hH…"V>N{x~?o,MMHu9utlZ+UP"U=72k[LႱ6(e#z臆Yᥔ$¼dlKSkKNv2c& 2eP Y<,0$<f)c,;PT(2=iw @. 0gCX1L8~fsISDETFwLos4 )g ƾC*\%*AQ\}_xհv?ީGx OsSE,h%X,RՖ* le}OtHZ\lbW̓=r*fc&6yf[90ӐfB.DZ^^~ h?ۍ<zu-a?'=u[Љ|lK%pjK]>a%}C 8C(@͆Җb@|wmv>=Xlw[nGn*?Yqm![P̽ųä5d1'Kzo}bȺp; V0r86~\:QPu N6 !fۨ5>jΞ^t2hXf#a\ ;E=_)a\r$yb䈅ȶXd<P AՖ~Vlw}WǃON3T2rM8ⰳ;&qD ۣ3v,si5jA[I~Y _?U\8<1~Le2Vu#p2^/VJ ({F\Ĥy_QtC<2n „JFPr |Γ#WkA6zzLv xL0|%8/NpA6E[c"L̏Z-k*x%'!`">:A`X e$M(F\ z`#SFOeSӱT:AVCJ Fe\xiRa,JljHR߱Y+4'ĊVuӥ/%al25L"ycDI)LͫS%q1+^( DxdX1>lM4:Ẃ|s]oBw7:n{Ǥ&=jCgiUbdgxgGTWhNJk>4 svߏޙn W/OpI%Oh j+}^pHS?oPX&x[ RW %,FsCwb}[)aoa!j<jn0bMY#rU?JG#ZiA ztb?TUQ:RWZB#'l%]s|.1nw*-:)]/*).UݮY ܬD鮷50却ܓ{}ڳ@F͇V!ʓ`#B#T,!Dy.=~9jL$q]qZnBIJ׹ 4p{8!t:wnE-ΟhCSۆ S:}:'wQwuifh@]6E)^U5p։JO<#49`*h3- 317ah5PL[*~ v%8Bu ?r+?3ցBӂ֕o`\9c( ngs` #"?+p}ƝUO3wTs-zCT׹Ǐ;$4-7oq1Ei;F#J5fPSf-ç vwʠg*D O;V~bnƆ 韘P]bԹ"I|lpnx rCB\O-6ɢP;!]~-"zP]^5mbVm*lϛBr=jVŦد%uxd]d(U,{.u!\YƤSGpHxAZ] /܌LFez]/U\V&z#fpeo8]Bb"I6gmҤI?}OG}Q.9%ۋOm3S#@Q</lb"QǷE- lS&I4s[hoh+.yOi_}\4"_sػ)3(0şo1nўJuTK?7EQ3+CYmX8#wgO?ܺFMZ=Z>x:Q*RX6,X>DDmm^}<Ԋ$M8ːBc'ti'^҆<G}:`mi;|lpPA΁sUX󢣍HIK  sqv"iqjDTbt9H@1pci.~;>PO(&0SH{M^Otk x m)-6TTEL 8AҠ W*mEەaGb#.- ܦ_x;RzZX0|o{ܒ8g3zozv ?J5zDDajb>^þ<mC0ɱjoI\o>uo7CX)Շ{˖.S 4jJۿ.ɏF~NTNƈ}[Z4#^"0|wnҎ[.CAئg5&4 yܸB4ɣ_E@ 0J^fUaEgU_WJGP}8%d)4lS=B?l~:}[`_XZÓ+Q菵/̕ېd/{@]^h&+ow4rCgqm;\' 3=)eK@2 X:7+*BS@Ғ܅shi ;ETJӇ6k A<5`$s0Da)q# "ӷDiCmp)Ecܧ멭,M NCmTLOhuLtWGW3.gtW)C_QbBr+`}YkiL}ܔƴ祢;Q JidBKNf!39Cz7+;K4OŠZeC=y&!(c᏿zϩ=`C=c#QE[^')EsK߇_! ak/ŹQYVuw+  V:f-^RDG3=݇5@I/e~ؗ>:**oaljXWhS Z}o85I/goԕvnADvgE;l"o\\aCDpX H6'QH Y~ J /XO#N/4Ŕ7I=93UII~E3\6.W$L5D<-A2q"ʱxDmqIm1I@; |o tmљC'n84䑏ahnr@>ԇ0>H^F8+"V1Ze{ȒͮvX oiRqS{ &!6[s-n ;wcEB{6gM)LFI4N#Ik *A]+P{zs-=*ZzaD=Wd^PVcCS ,8MZJs<xx=~/}j]}v|`Cr2űJ?hlޚ1܉uR&-o=#EH U*b0Y;D8wK@2o/,sbz#΅>ҕ,LA.~):;ۥaۯƇ{0԰iO#yES_lR+e1/[lbGvc4U*-%dXx#:p02;fcƱu]gbEv[6p_9a95aLmP5\=bN->'RW[r[ F|GHd^ӎ@:)-RɱS: '%xC{RZ2ڷ?McJiŝPe6)̄ՌM}ohǚEVNp|L;$#/̱jO |wG.?J Ps eqB=I~u*\Btqw,ZTc/YKV6, x%P*RW(oNlj۲ގM:'~㼜b!ঊ_K>ʎNg6rWSd("9/<,Tؽs qS>E,K|K]X XyI&l_E;@~TM^V<{ww"‚䳘\:uu$W )䥚?zXz_L&-|5G^ܑ%~GArߎ79B[ȱ^c A+i# v]?( ]Zh6@;ɍpCT sv/ iE gaL_meDtmGKkQH{\{Y$:e͉Ʋ+s \Gg򵳫qnҨt" #jרL R OV(4P+ p?IOpԿסst7/F4?5 @ďٕ H WAOB3;"ռ'W}b+b(O.GW=8OSarjgFl_ qxkOI$/~/g 6Rm\5l'6O{ȴΞ=F4^a=zo#?8Z%g`ANsA<$ 8&IW&UwSafx+J 5\$))}kW~3 OWG˯ ,(xపӞPʚ pC{Cњ=sl,p7ve,a$1lRC&[.f"WۤX`U4-:ȵ8Wdݐe W$hvP)&rĄ14y֗h~c?( 6C:31CLl4 ~Jt!Ry}9zy 欅4## &Nî!xň_qaZRu-U38A*H%*0Uʛ37%esÈB3٘BZ%zBX4~m͚쳖H -,i7>v9MsF>ryj`\o͋qǑc鵛݅ȫbDЛPzJ[cF d6@>=f`woJx~2}aļT_[X7~)T!]>*OtXӏk),c`uIOR3kP? 4 ^?Aq"dbpX=D֐ko. r(cp :/g;>`g9t!`cc8a^c|0J audX~% 1as?T~~ UY;aN`eMeTi#;TebfRvZҗ7w oM=!(#DcY/Y^*"2_Xl>(9S.co͸:CmE4t,Z]J>Nn2V5sTqD;TvTC=0kT~պI쌥;¨>މBm픧o1{_K^ ǡi_FYm/y72^`ׂ9BxuJ'YJL?]s~`3ѝ[Tm9uljO.ec9DQ"@+DxzP .†s=C>&i.`:s;2tl…bXt̀+V%F8_5&G+R* 3'f[32H"/!4`  ѾtCvh8[J4_s)4;/- Or=f1G\ll ›؟۸׆MPǼzQ$wnM| +44C5Lbk}%he@3).c(R>'v?+"3&F_ޠQEr̆!՚wMnZQv~pΧ 3`a1OV,GBi%(Wu_ [KHh1 ⧿阳Z27x5?,!WV Az -bV㔧=Q &Dzv\80=X8:UvղCdV6PO?װ-c6H)2yz}0L`D\1+yeQ&!C/oȻZ-鰿íRk\xyI\w &S=psTPVk@aEM=ƧtUz wn!0CQ+.0eltR$"m?ډ {᫽ݜW: RDYpqrO1 ;J2S 7Ekp4*q*s m&)9t)J42W}`e5G]'f~]t*oJ:"eQ2z5P1ld(vWggC\8| , x3n3/MPmбEWOm sW.S6h9 RX*vv%%j~b*F1;ǫ1c.7%0,g3A},̺^r1&&r#ۇZnuUH?꼈|AA<{ڨӈ )Z꿕J/cvKKOa.Z}h}_;5 xô. Xaŵ5>]&i+CXeF|"e5K!tLt>Q;n$}|1NXc N@3XDl^㌫.Ԧ cyUy,b < w0{Hc^ Ȉ}zB?t|ܥ*+KRܽ?Jv6Kӿ{* O`րtm1r |m\DI-EUqʣRb-cIKH1WkEa2[I>h H Pue0']BAEGI~dB3aȎ>8ypQtB-gʾ4ARH26PJyfd&]һݯ rvDT ]X\([D)ĝzfM a7n+3$ԳKVlkSIr,'ܙ]3;z`lZN)ҳ̒.gP=M˼!Cq9VEͅDNH}: Wfz)_ 9ΗZ$k*݃t(^W8 n8w9Zb<H'0P( Cؠ]+)%pˢM,QM_BW7<ۡV 4ڙgnd o=k1ֆQZ`2 O%Â8 p#o@{ivLgߥLz?+U*& z6ߩ;\R8w " ݍ>Bvdf? 0xTS Wвs_*/=YҒ_VR6A1~Oغ%ww{2m "X)bc):okͽUeg)kr-y&D33BH}|WJiƬ GC_%{ъg^1!(8i)~=IK&j=JLNw٠Y䵀 3KB *EHKL<0Q72!&U׀8&7NYe^zfۛ{2aP6W?#v[+b#H(#tj2pȈf,QD"fP³Z-`R]_eZ q|0 5 ?sN>ZKe".%u&UqDcaǜj:1r"{V\i|ZTKå.ݬTY,r{g'yx_n`r*R[ 3@Um~J l,C碳GYrrG 8%\=IXaY^өY"@X=VaH=,i2`bQ1e90 /Xk:'U{6APJ0V"M wy!qEEc0݌' `w#57#Z.,+#OU=XmAe(wiA{:i~=XrF {zF&!K~Zswךh"12pf4;c̞I.SOIH3 aO:[YR:AuGy)Wn1F?W?a7te_Ӎļ<25}cEmH,ލ}~CߋNT\}8 {IeYytk:9~Pd*ˊf8l0Ryx|.;;IN%95;-UTi!SSscx* v}B2Up )v>9}8@+&hu)HA}Ak۲ ~@Ndth=W2"G?V%rg9jް_Wd25?r"\jN5 yڶ4R `pg[ؤ:3O~u@)^\`#j&Ex9A@v)g$QzDM |Bͯg S%orRnCvx%Q~EV*>^ۂLFhr^?PjɌR/~ q?nI4SdL`宂Φ)%CyFބf&;7~-BCR%B\MIݑ8mܨt_=dg M9hro`jAB_ÂqEe/g aITHyQQw۫ZJڢ; ugFpV?"-~IMboMS8\6Ĕc >+/M7Ðj #98 u~Y% 3l/{F' -{iß:EAm2{!nm,'}WCvlΆpi@%}Tt}sДN8P(J]g<訦ppwbxߗW$SPlNck?Hb4{z(:q>ѵ[GRز9 0fDym-v aq_j9gV2k،:T 0~'j=3z $/ San/q\X H2Eyim v}E(Ҽf=U%ʪ B_(p(Œ|d|$8m =4cOۗy"+u4HELzJx|L56 ;Dh8Σ#JB ?RgRj^x'cryJqU;uiExf(bC[k^*cNe{{;HCѺek.7DBd^_V) Ÿ˹BcHFp3`}>9n!"?kZڻKðZ @ -H=d[#Sx ɨD-g}RkɰFۻ~5@ݣ5˽!wn> Lx[G&IhX݃%ORKZГIt4_5k3`RmP~D6/ %;cI ;*btƉy3*Ubs#_qkQzBo*2ByjF1^PUjέAC'pnLfl1;X<yK|ꢵbG]}'Nx:P @ ]AR[N]Ss|im5M7ODNt How1;v\IB9bqHMIҢ?E0? ;]9hDQ;]Mp XMf5wϬIƷx׶u6?Fo^O$mGQ6'U> "8gAh&UJcQ1e$ .J#c"D_ ( ~B^RpY-:Fy:TݬYLpc٠NO93oqha !酂y=@DgM"?qϱ3e-JSZ.Xx٪ƿF-Ty$d!o)"1tنt]/jc/ Y)̿S;P5؃ H 64ok8Lq#ZHkOI</y n֌ÌY+7GjpֳQY,sr>mјV&;u8z͢?? ނREPuKql.rtXyx6z0d9[vz_ rHUFbO'z_eS3OOU1Ȱ03E:ث` 6/ ;2߉CN-,1.>BE<#Z * K/SDŽ~!`zd ?6}GN?%toҷ$JгIy If27ܛOQ1q1aVn ߰.GٰQN.GJVbh`~-FӀOl>;| FS7 Ks 8c M\/͋;I4)N->aDDs?9;CaթDg]ਝsԱ%p]DW+M?Q;YCaAs}5RC_/߃$s=Λ'CtvȤE7ҙ7fa aqBwRƀ)vhCM|dyy^fё&dJcho {K'x5#vp&ՒVoJۛ<¦b5S>5]K~%?ms_l{E_jẂ ՗-?W~-"Yj`A!н` sutz73p~\h o6L?%>ˍGיԘ"&7#{7©Ժ?"}{ZO/32|_x@DŀdS|og]10!kaC,X=~[6 i ,v{z  'T4(_P(a@L(#Yj(1'{vtq<~ZNZ_~I*lږB֠BLxGptu4.+*?9fl0\~6Ovee߮>H9 R_vL/m&gi8%(nA[`CBc0uB3+䌤t&E#mt+Օ y]2;i7:ؤs3Qh6 B A☮+Z?FWn"{2>>csI}E!$ 71lLWUJndd, bN OXRWh̢A=Ѭwvv>oVņ|@Mɇr(x@deW8fڍy3xyMI "Ym=kU)Z>wOҙ:`+-٩xT%Ba! DX#&XD+C`(/#"<2$ -3rITA؛&XU^hQ %E{稂n)a 20»v.A~ Aeo9ǶՉ`=!8Ρ{4[@FfdjI/M2Nab<2F">/q-o) ɦyYEY+JZ$R ?rcAgkƝPȡ/Cx%˰IWh?Q.nS2JR\p;|k/ +qɰqZaτ2Y9[xNvl^>/'*g>GKt_4<O i-#مB6>o ٸW?t>W>Á#wtfV4T\X.AKHwfL V5Ub"fwb~yqáepGaO>9yLϨ7 Ma!]0!,yŮ\H'>vjOr_s.# (ݯ scɊ}" !)q(*Db_5*y,>3h~l :Xo ,7Q?$ԾV'. RG;xfU(нu')ƾ%)NN}OĽ vg!CƆ:,`?Nqa} NMhkCE" Qɫab s7o)bC) ނ/K&?yM-F<];,WoIf7bAyK,:}55 /'0G#U-p>LLCjy=tKȀõHe SEW?0_3MpgD `H!9Lh b>1?;D(f:@^XYYuBd \ /@q;r]F5I`Jx7I4Dn!rꇒx+pMN:JZ>FmOج3ssx,Y9 hs5ܼ.#i 3G9qE,ίyR]*00%ASWO.s-;L-fr;&%!%V1 [ Yzz&MjNp,ur!ch_%71576/߼0 Ȃ9J@ ߽R.\8Ӑ7 ΙER].pː * xr;Vk܉;8)A9eNȗDW" 8@?EeUWf)~3a0YrmoNml\EbDA uس\D3cjޕ_YaoJjVtr`QY\%IJ 5Nq݉*Q6bvV.쿬uteQ)e*q5jjmgFk!}Z̻ruZtc{Ogbi7P|ԫэ.\\+mV:%+LTT_H-X#m X=:nZAx?ax6:=AsNv_gJW1dN-7mܯ i$ ﾅןm1R[E0z$!%&YXW3R [GAn[&Fs^xF́Fl#8Fǝ-۳$4NGv: ì% ~.eq(fr]y">xQ}/Kfصٟc4Be i& w~È=,?tUtW D=҃'S2I<ӐՒl)w@[+IwU`iv A._Işiۅv˞d8nUdOAu#ze骿H'tcJnVsm@xJ28Į  v5gWҙ`'Oy<^<%6+&gԨ,4:g\⛶ֵ:o^Ng\a? .;e,uܾr&/2nv%Tm]\4[+|R<"#6]V,jt?fV0'O+-]J-|[v6} aԴ]14=5|5MשmK> A)ùt9[4\@rtv?ܓ  M*@6qh4;Hars&1ɤ ~!zySa{;?]bƻs'+q5c6`>c#;59;v=A+h_e!N8IaCLu#-52};89#W14ۤ7ַݜXfp6 sR`w jSl(R*w`yٶHkmں靲j\ ⥀#!~3ڄZ}f?@#G4-$&D2$D"ŠT'_"vV!XqFeK5bttN3 Io|&pnf.%q'nnplG]Q[@И#% OSKN2L跁fu;l# EPuhh8/#/ B !|F2&mDfBbbFd\ydczDB܇f]~^CnAԆ+ .~%׿Ge \Qz:hkkD{f ۔،R% bE&v l"lS+n]`r/~Ъ#oªKA cqrlzĢ- `P :;iN?n, K, ֊8+>oiYm.俧s0Dǁ5&[QfVقf6 %40-Hz}.rxNʆ"8?p(Mkz2`wСXbNFNpb+-āzœm Ţp`p2)`t eߨ~3\hi \dR$!P)+PvD: ؒ>4`L̔@PX6䩍RY5D|}۫lavtO!PFiC/+'ƈ/2~F{UƢMX q \ĄHX*o@zhp~VR %ڡluZ{O⤟g#WVsioOjNWW/vmG("!Ct/1izF0KZBX[D:aѮ"߫)`ںL BNwǠuT*"YO~9|I^ B3GdMOeo\Bs1C k:ƀWKBJM ='=F.N^ֳF4ikhDsfnC$@$Μ9\~?b:DIPXgΉh{U>ë@Iξ1cZ1V9ep.oqr#,>"InWS@>y@'3HIܩ~AOpbʈM٭C;F h* FEC.aێ6JU(X]\ cKG]3O4Ւz<<\@Ѩq?H77.u&`i"Ȏ ,$2ߥՌԂ=~\#JH"&QA҄B|zuM)k[vU(?_m ;)2'@OG $@!l;? FFI\/$cgZ%9_Y[d;8r xKV WȻ9794ΗӜ.{ʢ =MG)ݲ|}x{jf?b(i@$b_OHKvQ @n SM_w' Oßl&G*aJ$Oz8%aACdץ8gKzc#|T0M7_ cFX0< 0&:meg_:&M[H-Q:>a_fSS)egZ2rL%,VAvK[\5~/:Z,G F8 fZiYD q;iކN_GÇ76s:ŵ@L6p£@Zx)*TdZQD|++1x"F Vb[KYŎlr->u!{2 Zov#uNl-F+iý|OEv0X ^ Ycd-Ǡ Vוc26$D%hqrr"j8G"&AXcr (w]@%0*M.텂*QP!յw?,30כZ6C>:4@us!D N8Fa$0 0e 8 EjEI+!6jd'[<48r~ɽIGdhM`É9X.& F4.26=zf2*ay*bgq^)GLL1wv ۄpoɤ̡!u$ vh?FSڤݕ?-okÒV˛dMHK=p:o#P]=1}yK#K3`o`ݫԊ*16#/Wb5L6U%*&"_ !;ϰ:BI$ nycI[AQlHY"Zl$S2€e|ڵOVն ul?>datwAj\U#^#ahr3.Šzj9ӦIfY#H\ g?Ȝ@s>,SDVy@0TQ7o3my)E"P<A)PJ }Gdߋq>3-L{Je2Z17^vYbRZbt*E)P4~_1kQL}ֶ:H!qUUb4Kq~s^7<5 w^t-8"+qU=F`_ =b$o\>dJTa]fS)|ɘ,[M||dY!vFRp=ev.oyW0&= }{x4%CIE0T3*nhoڶ]'*;B[*#, 喏D#=m􌴆d xsԙwyZ[ݶJ)VjV:s/dШ6yy+Yz ' {ebbWq/'"z|(}`u685Q<)E-wmy";Nש/B~~[Ϝa)~.&k&8J5Sx1ߎ|V; HyA>g>{l:v#I9 L Wi<zH}Eg$?e(*ͦ,{:T52V:lؙaUWnMWNB w q-J_?>d'spցo`?p= C= l?۞0gD\63 EHˊ#KGTEuPCI(> {%xaS] *YfF S x"@oA2;v֝]k(1b,P￐O_L53]Pϣx$<%*#pm*?uf{G >T?8 6y@4+N88Sz{~B@ڝrZO\ %"d/unT.ؿJA-.+&ҺRP( Ӻs@ēyI c r _F}ZVl!FdI_S H1Dڛ7vF_df*ZA(o\#}\/˚GK^xw 膞vҿ/^!=&EUo=PלS}K ,F}:K3fsǾhSݞO! vX C :C4lV?vW*23S+"M@A&>y)m@ 2r2FEDjnUm0oy\KڴN }6DL5%?ڃNz[H *G!jak2Q|@/c?qJ_~zʱ<&㟿NƗ';ʿZJ/J8XZ?݄xd3wFA7Q;VP<$^K($,~,5L=~'S=  Ӿ`TJ┟1DOJHԊ.qG~0ϷTdi E}&_N6{owbT-]/*v>P?MalI)LjU;9qG'+M?<`jT!)? `MY.۸C?`1;Qb A޷wvX- :FU"C%6ѕnZ]&GCL=ݹqhz6L{ bOR%UcO%mT{y*QRٶOTB,|`z3؞ e 7]O>FB1I"LUqXVJOWWce'+[lP$!; ڴ4QuI I]7 j$:'ؗ8>;Q[-  qZč$Jwbڪ! M JQJ,Q2f8bۥt/*5e1/1 n֙w\M`&iO\!Mr/UW {9*P=-rP Fk{ 4Lb2~j\O}idwͦ tIe-sH~2,%QNzƶ9V^IqV8/7Y9u(/GֺM(31!MӖiHl s٘Z)iufK:FG" B.3OnӏT D{uyA8yJ(rRbQv ҆dҴ5^|Mȼ?(yKY%o?WыM\.-47(j4H{yg "o2Yp1úr203srq5zxAGx&7WswaO`^PBP.*{$T&"u~88e:ӅY4or!at|cB&^W}v'<@zkR>#YI4ztA{Xn#y"hW="yloȼZCE^7֙L=r=p잎=πAV&>MU͗,.aW^౧x1Q%*]5v~C_lc=>?H|uٖgUV֧:& l90}n5%pnq;r&O"I3+/Qb^d;mQtB1ewFq̤P*Wk|M0 o4/^IHu4'w\&F3{]O!a?#|vGSY J:K̦hgQyQ/` X]G3&%`^(K O`Q FXEc8K̝P \4576 \3$Êi"\yg `īZ mԥ#s;xT9ԊȖkVؤK`1u?81f݀C_?(l9m-*χ:c{oVwP:Xܣ=tQl7[xJr) (1ch KƬ>x^Rm%w@I.#/whcŝ: l tɴL6YLPAO)Sw8gila%᭴(ʴ}4ƥ]FDE}+ 'pǛ$j*r.(o 9ӓ(f?A)J" &EUw`xirdZZgĢ*%]M%O(L?k7ӵf2|`~ qDA j+(:Gk#nl>89L֭X5*<8PQǞ!NH#y'+j?e\t朏\䆶!z9j|^2s(jʇz9:ҁ<t5.3Mh;?SJ(z2,iL]0F(M,=.S=T^" &2c̚\dIK>(e+ 8jWFKzE}č`% i"M#i+HXATٵzcX  EmwEwc-;s)$*XA ,{S>{R!-F@e1&:jC^IqŪ5X`iym ) z˫7I/ q 4եί\)F9tCtZsņ^`<37G0nI.OGekn# LaٚkK mx"Ш_:sZow^NjF7x9={cg)̳-F˦8S 'ME~8la{>k$\ fBԋR]CG8-cӉbwb7BMIK_ NRֆ~[ŭASM [km^ha8)R5<}fhaim;.ʆ"l S!򁐀7 i(,UMO{%I~覍f/M# ,642i\*ӏ/F=G1#Pܺ5$"+G<-"dm#.P+O \_8*bgLa*G/ϹF5kKN?`"vҌ6dz'%ۋpgs8M 2h$i@9:Jm_] j# v%g]d߁nOG Zڨ xA޶QAV{xu@?0ӗoE}rSNU'ꏶ]:(1"_݊i%.e鵘b_M,mt2{9}6} >89"vDʹλokZH$ƾZ #RLMN9%|Q}iR{͇Dʲ;wu-"6iF̊R=r)SyBRM! #,3X, C8g 9ҞF/5^0I0>+A"9!@DcQyOqp B}0deas3%N]Tu9O8qӈhVO?JS87."`XsB83O]J_ 62,4Xe"U:a?δ>*R:}/ozFnJ/l70 OH"ʹ6 ×y7R 9&xkЦ[ו1I\݌Xm4B|U=YT"㢠xA1IU7-j"e&-"I<")ԮRǃJu_^sŸ|zuϩN8ףh@hcxj(8AMjaoxQ=nW'E 4Wd3FLoՄz51a½;R6;doci%L@12*駘̲_rG Z+a @ˬP?LvWL^3ıˠlesl%2rev_Cꠔ*ZQ?}kȭvbfy-s7r8ifA9M#'f.g1yC. T=a9B[jtɡϕfS;cDRd@L~g^ ꊧ _clb7%gh+,˛nüجR)i'ʭ7_4oX[W3AjلW?4m DR pj )BUD:a/hLRE9by~e8ִ 69]|9ncSN#tJNg]ܼjQVgl˳D\j(lVx~,t6*Euʾق R`#(FH$L\q|.S*d@\J3,Q%ݏZ)F |y ͑~`/chEAֲ)1H+))j9a@ }峝Sg&oA"ä_)YbĚJuXm3)'uE`r =Vt,HvC:V|}&xZ3$}x/Z f6 !ߠѦ8:~2q) ]ًqf|enҼw( c/y=Ý.gFxq-_ B'b ,#=KO%}l`b2鞚ۃ_C]wUTN׎]g~$VR| q)ӬOл*_ D_lZl?L곀28ɑuFx[ XDduNEueU<zSbeplMBnl:WyZK~jE>0v Ao @URkFpo X}fWv+_akn4L,`3# (B]3<~vT̓>Wcg&&H声4{hӥng{ĂNg&N C!UuNx٩=HES$1 [\54ޠCXzLЃ܁y8+,@%Ie4}Zl#kԋT$/'E^j Y7@W xDL5;$z," 7h -Ca1^h>ʻDM/iZ3ZjamO}Hl/tą;g̯&4&휡Kb,GV@iFܡ"- Y%ʵ[ *ęzkg$|֨ްϠi.vɝ,+P)3qYjď٦!Ь%vgrw˦(#Ԛmc wz'e&X (_!)~an.-TЉ;4 yBM нH[ӥ$l}c[ f%6-PJñV!ie9(>Ʉ䷈vf!]d *UX ךo|f}^R!A,om\.aٓơ 2ӎnbNxt{sI.n݀!͖29"$>!@~C /¨ƐDIjTt7p`Z@9@@' 18)/G\Pw-/ˁkz&RN;R We8[v},Pؾ|*B)W8>Q L|*&-qyBUD%Ӯ4/W Whof al"%ۄ:YR/}Y|(=&:/ [ ",Z-84*i[T wP+(>|傮Ǵ0:ъ Eӻ0c$To9B/ޜCbBJN+؂ddR_uŠs}a1 e"7nlJ@^ϔFeH =VY#yV/kPF7@LOR>]֡34M/9 /hdIeF&l d1衛Z}:0CX9aB/N:5_]tgf|X'>%ie>HJb_IRvca1or5;Z4*)I:'vgw7h,|A(cYZ+vhT *(޽xGmWyRKTIӜv@6Ʒ YS3gmOiGɐy4""23 ˍlo|Bc{0SaٜlJ :d=[D{D]ŽҒ (@wztU$G,ޠmhQiY4xcF4d'pM=c2vf7"c|S}ˢ;yBfݢBRJZM@0U5?Q}x9FF+hKtT~2F c%WA el!fnDfe|m*ctf<ީklSڑ9,Qݽ<7ygrP]XQ\7tʝ," \ }(]:}]י+X%U _,CvIUпsὰ/ ;S<Cs&Or1 Qv^2>06\aѾ^>nL]dj4,ZvT!D~'@m,s*.Y9X@j*|KMF_m7"F&be3{uQi4 s-"'q ےrTIqʚs'аӌZrYH\JE9 ЖY 6a+ڭ 1tB9+nYB:w"="hR;[%TGX'* ~ЅiʱM%dC~ "eQ9~} <*qoSo@&|a MG+~|{eApMv)GN|:ŘYp'_[8,l8Nbkk^3xɊul|HE- liϭP^k,K $+m"jj(_څ`â @H PYw`({ҧߪBp`Bqq~#uBVThFѬ} &pZ$3DACClC u4N iAr̢PEb=!hE Rٹ~}2@G( !O4˺bS9TT&VO}fFfw8ک_PŌkMNtǖj1yUGvMFce:O,d])o|֟20ys$]]*jb k7j576.IYypЅ(]^I|;Li@ggkeG?U$~ȳkm;tBA=M= ɕa'ފC~k`6R< ։ I3y6 /ym:"Ohs=.ք݊`#y&7CH!5hY)So_unH` ̱Cja1J!F@͐owx1@;_\aP><+Dv H+v`N_lK$ iY 7T.馠AbC|:-㑗9ZMl,;Q:ͲZ1\˨H /{Țl2v.n_GV=ͰƂkTotk@e׈VU0,<,1#dHG_ *pI6"o_!op{Y%TБC^YɗutҢvZpYJ5_TG킬Ltt 49:% 0 ?07 J؈)Q/8>* vtkH v. س{ 0TlE>82-4b /"s^T;Xô^.ѫÝY} P48ey&bi(&EpD(L}?mJ%/hC_ e+i}\}:4DX.F}}c[o,Oݞf};Uf8#5&l!ѿl&px+O&Qrq\x _ ?/g>DL;Fd˧zBk5K$aʉAua}, Lދ`HPs ZS˪>DWM%!<??%ۓY`aXU(& joZEco uG`"S`tj؏U *sH. Ij͔Oe%eq~cH WKԒ,kGvB@} pp.m(EQ&dtϛ]eaByʽ6˥VݎXS( A5%qe3^qk.i8܀LqA\piװt{h2b-_w*TnЮ]dt?W,:X `Rڜ}Z U6:(:⎭J2%%baM G||}PL?O+i'Cґ3ZQ>[1u#U6$K0f1qEŌ!w[q'?.ww@P*.|4pl=$9Zf $@#Cj rey~5E><* [MsVqvL(.'Ӗn)g{*!U!vA&wùbW@-Q}ַ|ڰ @u`s1$NR1{稢",tB׆ ݷx1Xek)0kV:K{1$툱)b/s[>*mo 9m+ϺvD'B ѽ-_L:WVo$'~榬bHVS uRy\kg"eX{MA ,/5Qg:DLJ,\3V $@Y28o}7' +Gv ߣגÑ nx<^xy@[plvWn9b\6juyNޏz>e`[CPb~넺F]B0G:nп@0r9)a /SQ I֒'S$ H0ezwS{*r C(W4;] Ewc(G~N5nն1i09f|,x › e_ BƗ{4՜}'Jƻ̚# Sb>‚؊ؘlBb}cxG>HI&`SLgjfw.VҴ8 pmLEʀģduwɋfnHΔ]ow 6̹klrIotGFĞihZk&d?krOH7)0"5lԴ{|D.~~p*|SjW52ّHbZll6JrGpTnKyiM5wũfR?U MfqMlF20W2] Tl,D47c>$,c򜡆h4Sw~]t`FB3'*7;Et[5'w Kjm8{󜝭<6^xa蹺,R`sJk=ik7ͷ5zAa@9kmM`7 =g_S6Pgoy1> {U{p.1`gN B:* -fѩq}Nˢk !$BdY, (pR7,_I\&$Y'8~R =SYgKbol:ߑɞ`n ՐGN[/]fh>N7wc^:T`NZ*>v9;f#zzAi&3+ˬ*[1Yu[b%/~9-p)n7d"TDIh13q芋,X:J0{и:΁Mp,$dz2-@DBf3Ğh瀮 Zwg^\\bXiP?je jJ8'Rsp8Y [+ 'Kjf!V"i-S\Q-/6il}Kzfg=d1/-dpx_k`=$|'E p6H eYh*Uf}36GJ7=Pѿ3*SQzG³3FJe*1u[xh HCCo5Hu:P.`I|[$;z7`/<H\G7H󘙭.Cԡbc=@!G`>Sp0Qxr M>Сw12[QI.<8dP7cN;{qFP[KAH?DP?\L$ p-Ʃc޾]8$op6lrI\z(pT.5zLcYC\Al_ &#Tlk"A|a wFd`E:MԍN#DFUTlO(o=, `ЌTIؼy A(Cy;jwR0tc/nI;bvkU;z3#f{j{&j `m+ӊCꂞZK8 FD^R% E[ծ^dg{I',Wm[>+;x&|Y e{T(eYCLKzNcEz 19V8=6+j"KND,wbN`^JxOי0G#{=STHL[dnmn?1Y[ 뿺̿rl;  nD8?]x׳{mH,CΦwk1gKl-kˎ4q*$SD^Yϩe H(N4t~ӳ46ZpGug /Qij_mpSf'uIw+_1ǎvOB5lדX2JD/]8e #C]mzW36S&byn)uײla}UQ,Zsr >IRup9cJG 6{vl`s&L2 JOIRy} b͢/\7TzC2tꋡO'Qb6F8pTX( b!&:Վ&rnP57Yja!-h*xCmsfڀZ=BSؿM#:pp 61qPX:Z :Bĥp~I:s k4c.K<Ҳoi@Ux'%qAiHe///J |Tzއ3hnښ1$!d* רRB\!c͘;EXdw2'lZ:33PT(chµ<)0λ9qAZ5΂+A/qȉdXo<~ 4cbcf::^ Dɍ"cvlSnԓ Im <iG["FH1-U7"1a(lf*;ϓ!'[g٫/#Ղ]k0͒l 9nTY0i?'h_ҁAV᤿,??vU4@mQv {{ /[Gʧ_rl!dj(xL+tVejI &.@z-^ $8e~EIF|W>W-OMkCCLf< m7ԎWK)Qb&+U?>}%=PAկhfŜ%mRx*‹qΛ!2W V|LSx2gLp+۬A ma_Zڇ)$r0ޏfVj]udz҄Ą5e0:>V%Vݍؐ~EL |Tijx ZJu VC4InR㻿nf JA- m;:R N :X Y]#6%iVmTFq#z?yvwK)u~ԂaMVyS}: DuIՁ3M f}𓺁6x78ߊF*4aqH#[kO!1\鶞 en| (d q%̠NZj/c Ydae+޻.vbmڢ U+lxiz-,K"~kWx]լ\*];%bh &dύTʧ/G1a.n i{2Ks7N6hS>qQRG( =*5?a6?DPͰܻ%uw;;ŦYkmҸ\O4`GlVSX\T;WF}vs浬\\VMMT; yCX'9J|ZޓܕLqD>M[_ڴM|?,^ B @{ '^d tν73߶ڷg.=_~-U{H`!˫--pdn[L[ iĕco料h̿GaҀ{\=9K/<8t]khf\m8ֳ VF \D6Bӟi9w.RZo6x|pZŐ=H*ӵ5C&r灘CzL|sZTwx1趒1T r)#P0 4a9,lx߹)f=_O|}-=|xJO - G$B\DO.s͓Q_]'Fԉv/ ʥmGQT* b WW:sS 50puv5IJچDV;(t'ԧXk+xxs6p D4Gr\3].՝ܕsT&ʴW- # "BK+ngr$/0i9վ@!-JH?x*EXNF3ްam "l"dK& $Y(T'\6/B=F$\Q sN FXLIgq(I9Qa9ӎIDmp.BI rHD(^dI؛*I3Ե$ީGBk6 {@qfO7_eɲn .L%dcaCC4)E$Uhu d#34aGB':$#O_D172WBm,\Vp1ݦ! Q,}]fcTq94 "K?{뼫~27]AYc;` W܃`H,~˞^:Tf1_Hi){- _'i-(TGaLr&&݀T0n2(2Q%5vŦ_NϑB;W+wC|wX_>*jû=SrUjy@V'DAAK"wWJy * & Q[a*MBI0PkGYʚ(i@%5qbl\=LPJRp.v)im3οNRd/VW8~îð+T8TR`w^Vw j ;.mڒGjӆdhWsKl\iN=NfH5uT*S)k0`i%k@kmNݐU\߾VG꺛X)%e &L.9aBjT؎kcle_@,j=\NRCB_?f5[i0Oz}xZ}7!-d׷g2y aNsI@&dL|'q3CԹvH!^%*ۮm^ZL ~i&^4300gs[ڱ[Q<!(t&yn/ڟP;2Wlt~}.í W!?d 偛څBݓJS&{fWt*anHD 37RƟC,p&|S @,Ux_Q0 eS^(b.m SSC^RE:X~ZԚú O-=MZȓD3>?K`@- a7Asىa/(f=REt^M :%l4~2K^An;wTīo<+P?fטAit~,;D2L`[-|'0$iҀ̷<-]et\wCy~vl/ X DjZd+X_ ؂u[p4I{3l( !G-xm.Bw̎9=hFn53W'S^?_0mVeJ+Xئ᯲#+,c=Mq2߀Jo>g ()=L0GFKzpǍN;{PnM.:7V0VP&!l04\h)rԱuF$֤ԭgi-Tycu$䃔_f t=6#PiUPa"ȴ෧l/_T6ى.w\lJy!gpVD8'zY& "f%p¬Op[.k~i:BF/Fܸ%*AgWށˣmHfoBaqbwͱ='W ULjt 7c`1|[7nֱ3ix}ٳglOElAbs[ˌѠ}wm"똡viK`Y@>4&MZ3b>,w#LSEu$# $R*OU; ]n&=ߖW$"n\ʧ;V@8B>Dףo O?T,?` N`qmUu]_LDI{t_sS? 9flG5շǢ\t)y߂|w/bu9tTMSj&W%g؏:kqi6LAi 63r3lpLiL[]E# ]Ar|}C7Οw;1e9ddӢ}hTer H^=Ħ`r:u?ɏ |[25$;vjS(SxT|tq׳sHC99Ʀɭ.OpidY%S&ߗLjK]BÊrdzqs @ B|ȫ #un}#|o=U\@&Pd111m M"~@`G2jH0+$9/U3_™Ɓdd'BPݻB;} yxtSGo>G*}gWl'D1Nҍ]⚔yYW'0DـZu  Vӽ3 .ůQo9dQVJYʎѳp[fE$f9QQrLj =W~/S4nv LK@g*sΣ[ S*%%tl-^YAwKhô[!D< *S)+zR#WP~5@pN?ӝLu˪Ҋ1x1mOs{wX~/JPsZte^>lx.PeZ9~YiVPNŲ:gM_lڔez 0u&`j%B=cÆ-6H ;?^&Bf=5 dèCdJ{MR_p6CV{<),|X_[hLb1M*+3w&q^JD4bˠg$+@ AjRXcS%: Pa61g549*\d@=bVtQӻ:xgpz]f|Su9F$ݲ92  ˁ_EOcbnd 㮇u__nss},0BÑ'4?c&Ö (۽6`JzvB*KrH2Ԑ$`WP`*05U1-6Tcws!uH L"񘛀k|l|{i.(<y+0M$ԑWlkb Ww,] mRbŗ/Ts$o`H}=O!1-v}fS&%B:EZKOL>=xLBo5q~"/}(s3u%! Iƹή36l{c`izg|3/"4-#?:"(/rd`Qr"pO(>PF@7Tmxh~z2|:111X- _o|ŗeL\wqʹIwPDSګ;U7 ؙԅP4$1 W6יa򵇮tTM7kNa3t2@lɽj>%ZQ"xI4#tX^9pb&ًU)FT> 0^T쩹bL5]j]7ST~}C;p)5 f(ӚћmLG˱u x#^Ƈ :fY'AXz?r=n<[Q`IH(,P7mg Hd_qMz^nFCV;Md2Y|'U!JPf'qC|1s&-)(ʬǥ6'^ű=\ guj|^عBvi[c'չp88a!Vb Ǹ u-ߴea]ƫ)UsT'kO1TUVHi맬wƄ*^$muk]N^g(3r$SdS?^D |ZrBj\ U3V݌uz;ՌwFQj.$u !JWZkn`Xx1]b!RY  w;DdOVO5x'_WQ1Q} y U"!{x+ST9 exa9%=&GEtɓ 8ZA^$hl6jBbgx#*2wfj\M1y·e܆ Ss ;ᇆ-b# ѵyEtR&Jݾ&еx>.,x/@݃{q剘`Y5̄9b:W Pp#;i:pZ. zϛ(\bt,E QTk9DE\ƸDx f#6+;I7tT/>qaLmҵAgɗ1X=>{7(DKE,MsӖK&}U=?ݕi%OˎIB?䯲:`f%=u[fO Ų EC/PǞ˟\\3D-U:wJ-* .~EkJ?Gr)"i"D-Ub%rYwڵD+v%V͝G7+axv]g/K\ ٗyqǞi&3& Qg*v9v5ULnOhTw޹%ԇACu85e[zH`tbů z-x52Y8>2dώ(3Up/ӓS6\8S=l쿛DTr{8,k2K\8 tE'k>~mü ǐ~`*;rΙ[clh뗜Y -jޱ3F. վ^q˝Gg.wSݍH(jtv2fS!\ $DGf]bDи2yn]Ap#P)!0% Œ1c!Q= !`ю &݆!}t#@;;]4G^XaKm9y!$S,&m^xDPI`27{ˁp9^Jn׽UFO9F }>whWGV0*/g5R"]E.~ ocQ܅t_v-e~7|4X4ӯS˯,ovhZ"_vǚWn[/`!JnOCXZ81Bי0ޒ/Eŧq# ˴L >)pIKcvJEF2̥|K)w~:9`j4Y<+#0ud >8tT=?09@ VsE۾-%AdGΔ& Gn[Q>Jc"GPDzޣ &3Մ&.sU?^هS]aJe;7p壯UrcYP[/Bn<?#6PxOo) .5.-4R$˴uuݟ#^gpɃG'h5 ? UιrPA."`3LP_{'>)D@]+ϗ OTHLNݛϼ`y`OڊA8'K4/Gs;6F+zF!%t-Hn4"m#ӆI@\AQQnvC9#ZdDW'%oq:ZdOHfXqD5]ad Jj#=(}/8s Rq_"f8(,,⤯՘h>sa1K?~Eޡ,f?̊-2ujhvၥl<~M$"(Ay cěvsv݉|L_ ºH>$ŠܳB&jmQzAW$eA!~T=J"r289PeMLrbtiRQ'~&?'@u<9_z_ 5h Te&X&BN=,%AoaՌ*"'̧yܿh5:]Oj>pԽM9Ѻ Eԕg}9Ł)E.%MUΠ;8FnUH})DNyHZ(+e*qGR ݋UbE.lв<^މ"VlIBAMs@W@ $',~vXm5s{ln㎚e (D׾SN.Hz᠎fQ>I[zT `~vEtt>0}.oY3  Hb!$ؾƍ8BRwihLFiу] RvY j$u&CP8=0_1OL2R_zؒ[iXv,\j$jBCP_RL~l9KcͻQI{[E6]~n&,7*R)c8{[#Rp%I\ukܺwMU?9udt&a8|Zoᕭmsb-,yt[},kTL"Lۜ%K_qi0Ħ1YE-Mc.HP?Apq(5E0]d3#,BR7E)kDSnЂ|z}aɆKbiטQ6N?HHdSD` Wĥ솀~l7zM*ľW|BݢQ^e7"xjQs9)hz۷02OWp*˸Nmk&#W6vKAڗ ̙LD'0=.o/"=ҧiƔh{yΎЯ0vȋ#c;v"$8܅N!$xRHU~vdиؠ+O5 +:VvgJ. ׎,1!80M A:w-#1O@sQ]5&Z$R@r]0ɦ:O[C[w'ȡhu YFkNo;hNsKwfR\m2#LI s۽3Hsi`r>~%]^@3e'I_43fJţoJ8?{m_ CRԼ9yꅿdk'Ykݑݹ pT$]6+2tO$q1T_O;=plwo̯recIECˎ"(Iow!4 J[q8FOZoe޽ke6"YKK=":["|6"_i3(z*~3J}+ RI pK]|GAvn' JA)xL/˂0'I*:&zF4JHX2c[mS#5ԡ5t@, ,8ٍu/Z UgEemS5o{bT[x!;\jJ.)iO:fXq?鳄m'`pNǦiHiQ,-doT$HM:X d=>طё\-@H[%#?&'ĿWƁC Lfь8Џ(BfUڨ1)nޕ=4[ q% JA43|X+~DBV^M B f,ʭ}ܣwmN҅)[d 㚔u >~HS_Hy+D륕C{QzHݗ?E)뫖l "{{;*7Yu_D_V|4JǞ];0,o^. yڰ>?q)jqD.. _U*!$h=dn|\`WNfĢ\kց9h@`#,ZF䋤K*6^MQa$[0?rʺE cc[J҇U"k;ib/?^Tl+Ig Kym Xg/:>FE%QhCȫBk QS{psn;tJhhi=--:g 'g}B@f_23/I48=t+%#JogUqoO ck7 1DM M[}C*t}yb@5DG&5΍ o97i vR4P~#sX!JS)S`Ʒ õdTbuNA 2Eͻ(]Yw絛yCAf\7Gk2M !'bs׶ػrrK &b*YCetTVè3Ě~cPF4EQ-ʣV<6#O6UwI؁,źh >yl~ XWKdͬ{(G7W_lkbY aͩG%}%l^ژ> 󏒠63H[2+mu)9_%kƪH{8ފ}]!W-p`3^E;F=mW0#vmsN5>X*2mc~a `KkR,O}3 S!Oz5Km)PZlx)«(;1um#ޢ}]Wom'D[ؖ:#yPVOe0 1 t_|WՊp qʹݦS>$~$R~?~e֜JJ?q`Է]Q;xT8Yhֳ`0B] ҈D̿ܪ&Fr񌾛2V;Q4kq>׻$!I" A?tm+hxIKNZS{靪x3-zsozMK?IAl!WB[=]Sڳ^9wBC*Џ@5"}I /1.D%lӍ[Z2i+#K1E(3/BQi}OxV`]EpLt(AQx:`,OP%`L培fO p&A'֥cDPoao ްV6.Uz `'z[xnP4 9Sg-@Ɩ6]'sW{I4*d5\)pd")Urr ۜn u|Ðe"~+ c!^Y`F'J L~:0"CVw\kf_CWnfhv/7pt/WMqٺ-OŽB9!,o@#5f#`5|O Ƣu8ŗ΢#eU.)(_bG÷8Fe ::voSĘzeIr6s~Mpσ9Pv[FņE%Bg:bI%0W;vUq#q8_`qߐ`YDҧH1͔Qt^>l(](,-}ҵ&`]|mW馽&Y:Iww*gof2@Uh5Hq ix(p JHEY[8d,5p*d+!BT$d!얇b÷r$bt1]ت1=m=b!lʤ[&51cT`?6bD"5|KYgS$ۮϦO{Gdi.ĬNU( {&b3bWΖ,9 .R$E ­w/Ƕ!/B(} 8X _ހfr `( 0k{L i(-$=|N =a"!m&b`:O};^2rkHim( q+ Q4yC7}MoR׈ɵן5!NȻyg?¥q`$?a.1;hZZ3-e^BM-*?_/lu#k(B><ęCJΈ/#gli1|su]=lA,|(ƊΚ T''Ϭ|BTWrt=֝?7=wSR4G+9΂pu"5-è6)9Vl@߁CJ.ă[C6>uah¶ꢋ>bD<< 9XޜWMR{TG>vfp; #{J =+COэh¢#׵ Gh=6w`c_;n aEg˸lDT2mUf7,_£<|mwܒ񈥽CL&hN-qeĐ]v.cK"=@b= }n3hH:Ĭ6Y)ߦ?(ubw~&KC˞yX住wvWzh 2_lfbÐO[㘫cO<ʹ[8_NZ_k[pI#^3w cu*Ufi`s7N!_"_XO۰@M K{Qᓐ*xRw߸Xzf V8NW|ێL?q0;ӭ{FϢE@5qX w"DJ&^l}lA^%\lh:mo![ E"<-=̫%bl  >4N*^x[,EG}N_iy]7M}*k GƮ:J^'>$YL`)5E[Qs,kaqdc]-7Rl|aPd*Lژ+#M*LZ\|~=Ȅ@OռRٲjVUGA$ur+d/Tο Q| r\ 17n e\Rmy/p6EzG¾R|4'i5?3b2쟐|0|=!$-|seKs [㭨 QRh&gu.GB@[d%Е*c`-E\@E;ptnx;ov.HAN&D%x#i3[QM(I&H E(%fep4U1nN. ͺ/i$UuEtR;ؿέAD$HᑅR4tY8%70 );}λk%I(wPv:l+-2fq?SOD?(RT|h! ?l$U55Bo<9-S+]$Iؚ)1|>` e@};'m3@1k%̰ DynD(iphW2{=^" k},ɕ:K^mư j{T.5^V9ERl0ڠrI|e-3xB2q3{k4kxZ##hv/I7Ls@JpI)e"oGC!qșe{-7i}ݢZj #%ŇH=,FR}/S-1pqIK_k kUtku,.61.V/޼s:u,$]A5St*#s( 1Nm^/ &@BQ-jF{%N!;3j㈦}ej Fh2zw%^qي5 &"EcMQtXpa=PXlh~9x-l܂G [Xp9` # b ;Uɂ5<*\qŧt B..$ChB-WdSBﶷ E6 e5ԗ.vSnz&>VӦO6l[k)׋xYį~q4VkrOs+U4Y?F2H $RuQ:^*اfX:(]i=b̖ ,vC=U[?㩐$Ke b\$~[9A|Bϕ7(W( i(nT) zaPص{*%hY}ꋌNHF vhd"v ^e#gPI(\\%~sҶd[/e:=XxEzof UV^P:3ZNf ҽ}#n"i(s~]'-JWi|r@P9;Jru뛍j5'+`,O9(RR#uGe~՟#:qnFKAx9TJw(7ۖy*'pHv!,_ LcZ,o%A(ic[_39-e ['Fk(o2'td*PJvvyt[N,|wDNZx33xuOfSDB8(t_K*o8'3'3F3ӀfXe|( ^0I5wz,5{=sglk~:[wr' dħ&DK} N!\_lF yƁ^Ю<ҏȥ±tmzU- Ήd=Km %΄}m 佽{PXRrow,;^Ԧ[]r3I&"\QKxJNQAPO3R\8gxqŞP|Y-4Im8b"pbyS]hv"]7F5<ȭ);Z q4UHiqHp8K‘a0v %7S~ 0aY:B͂L\=r!q%LJDmVs3-BpKK f/+qfu܂E*g-CrJyݕ~Z:EK"L1)E-xmo@!XPakĨsE34~S73įWds!d?E8Uś 9Q4PJt9)bpn2ܚk+˹k(vՈbFfP)t{`\2:y+^ͫ)Zj ->DUW<9V9 k(G+>ք/Lz*5d|Pixt_,ɹQ(OE.ҏ% եedξzx܎탷E1*}r_ޡfxRcj{w#VrXH~kYXmďL:0T<yc ]o\D^9 6^+Y?Pj/B YʕR~|!tFi|0|{\2I)زz +H#:T"ῢ=9u/{ i!WJ( [:d~zt ' 60:am6g6uw5<ħWOU2uGTbڧ\O;ϽMT#j{JpmY:8TZEȫ+`GpwH^˘Uwۃ4)vȅ֤5齑Y' 48k>2*~r:"ydWvܪ:Pw &=I+VZ({Sͯ@aMKR(&dSMom=Np~$-n{X].ʙj2:3@w%On[b)%:_VT6s~;g2± *Tf6ON1jťe {|\fY]^xlybob <65EPW/ k0TNM4;GRS*' ((ľ{NMS(D4&Qpn|Bu{yV Q"5$r!dq|޵O"+[K1i;[q/ އpkSdnO#գ㴶Bc˹p:6@ni_Q,˷RbMrys|@cwx`%Ȓy^"<"xqK|~U$U6+}{*Amx %pp2w=,IQ:RvPrfLNeȓ[C::m~f]=zyl1| lH \$;~teh4 i:Rހ{%^n>T|Ж!FwǹDS&\ .F% נ&^O;гJa\`y 3pW &C #t׽0E0X,Bvbwq6\,nFsO"wdaiМigo$~&ao6L_lK]leY>%]U}n<D  ' )3/L$ȱBCXghmފ,Xm]=3[#o}HKv֪AVMk655,F%1뾽Z3:wOqztIv0+au91ht;h+ hǣ ̵֧'I D8d"!$&l7 =<] ,=]鞣ڊ#l3i<8 3&% gr ָ&;x55p$5®<zpBHZȬe9{pYYKl3+(?ᴫCt6cc ڞld+~/aJHlswe#L"y.MSj?{ Dɟ}G%=jfs.KF=/#q)̦R81/nI^Aфp e[ 2>Ec%"Mt-ǯg(˯G&&!kE=l! M.\EL:*(*;L(ۿ̟'+h/Vp>6.Rr灭58>VF,0R4fXW1*<@\^-ME+lF^K#| BԨ&$[lwø {_^AڔLt"jz?W' )w! ?w&5|}v*hS^\e}wu} 1E{jVhWy'텤xtpCʒ;?Ⱨ`qֳTnQ"ZXo$k*K=(ÌJ~˝oCW#_o*9.i9Y-H+1f좽WnY"Fbnh nwUv1hZ(_U~̥٥9>|d-y*QA?Ml,;%X8Yu߾|pH`j8MtjէĬ# zjai a;/4g$:ߨrRf8T^fe錺VX @憬P xU]3:^67h3S/G8v28l߹4A- %ɪx@j&ګ ce!6PpӚ_%"eʹ3F!Y[`)I^?zf=W 8jeDx~}ĢVقnZMm; 痮EJ(FKOLYΓ+SE|CϖW+Sfȭ&IAD5ІU8`8yC_H:{!3܄ 5KJMTށ~OԆ$nKld3Hg)0SqK bj@CY.ғ6+ۧ^S;9`' Sa/l*[ֻ]xmp۪3-2AR%+d+W"c? 8/ 5E c\bw+z+E?0`wrLHy'0b7xV(t_F>>+ ?fǻХ%]@/TjU䘮ڎi~MLL9okث%}BعD4`LdAZ:= FC;[ݟCـ&NdsIu@>;:1}3\Ye|q}%%ޱlu('Aڞh̫bܾJ[_B..y9J9S'z6IDV@&hЛA3H{<;UY[&PkFʾJcHoMM5!.VU/G'NJ˒!{Ad&ZB;ɌhI9,3`1L %}ھO^egBC|YC|vUr_>sGŢ.bqȮ(-Ώ~qyt9ݞu4KBN!^^Sc./E rlsS맊$/xW[sfN,@ٓ\Y";97:0W ۊmbl\Z.3{䧟ڑM\0 5I }uL G\whL /]\+ihvę}UA1X[DzSH=X%w)E10;k:k\ʱh/ #ASߞ3=h}G.oso-@fybQx0vչ_m0+9u0YyKDJJ{ d )^wj2~Hqf Py֖KQ(o9MsX݊!`Tڎ̽ 66kRrCԃ'sT aF|S~+lȗ#iZsk꽪NgQ?([>xV_ _fk7y]bH] Ƈ\=[.{g{" Y~ ,{9bͳYu!e@07fSywLWC¦;DlWFo !La`@Q-ofP X[-8$Y77Szϳ$,,gGV*&6ȗ"?[NTagdF:.M?>,iɿ'_/yȷb/c |֛B8Sk2z lݣAVBT t #v12=kCi"o?^ч!6eʀFQ(5)UÇĈp0 P_ױVI?s. k+yZoΉrMURD-4"astq$-U|XBw\dn+ݸ /4HP]żG*=r.3qܭ΃&ʖ}Y QSpF6U~gʲopi B @ve/O5pi\$7n'nHZEEpuD恬Vi}RƊ#sA"/WsUgPWpȯ9UXtJ{~q`hoF* 9<_l@4QݍZohB,%6D-)0SI># j<aĪyofook!1dqT/BĖ`)|n73ǷGya,\ҍ%O-# VmCZ0{ in|N]MQrcvbC[ U!Pp>mIt56-nk4YL>9vO⩌}g?`=HBp QE^D ;15`DQ& Cҙ_^O8&@ tcu??e3fлdDR Mv:W)c>'@cC}!yL jr]!sv {CpD@YϑwqD%/q.G0\$+ϘB@hvx~p9Q h#ccVyy`EBu Ֆ-dӥ3(Y+)줵vZލn\^ۜCWCaAEZaJ8ڪ%L_ye/l B)Dg{J/iW* iiΜ 0\6BoY1%-[=6aM52[<:>q{NY7Rp߂N4P`D*wbnWMvMɒ7 !Ѿ(j gZBtJA97|WH.y,FuιҐ,*Sڬ?%9zES(ޖV͜5ơjI1nzL)`.%eY+_WqU3.<~6~boT@"蜋+lҪÐͬw x~%U6N/Z<%0'RҺtnJe,2vS;o׽cwјATR|=kobl$̆^ത-h E@Wh ;HI⯸1br+!gº]‘1(Am#q >VTx)ݠ[Tm01ǯx%(@vPAkԎd"`h84BA6Xs{f%=Uꭍt.uNz6"+NR= M:UGԣ^訪x~Lޡ3\HAI Txl̆Q⿂ =Cr0+T⌤aNS0OD+Jp-^LY /¿3f b!poǞEdGaӪ[Y͞Iq-p>Ur^YB} s{'adnf|郮< %G/PTX03W"Cd=.b]*YCB ?HBjEx0LU(=$$N9|b+f!Kp.FC4 *I|҂r^hIf3TĄ$/rx,\N4YG^q9C%GJɆ^aJhj|]គYbk?F8)-tjk󀲒8RͲqs`НcJaL%lg2z$l0>rIP`h`˹5,$g2-ӉQҢ{;V&P'p^P@agE7`$p`\p9+\)"y9y>^,5AG&tc{6`1@tv,1P{QM";x6?J]>ٜM#BjJ ƁXMJ櫕HsLjx1o/sp@S V4^\˨qQ}psH5 G؟SfF=${sIQm?8.M;==!L(I^}x}xQzlHi X~-J4qH[ⰸo ߜvi>GLjxe 2F<ܱdEveuHbB-3H@ŐQ8tު~Z^dEfY'hK.P?v&U"_D-7{~=N±67xO+IvUK<[V[$LG Nl]h%1Q=Zޅr랯PB+)}OXM0~.>W߉Mn|.fV `ax99 α.wc߲uu 0k9vʒ)3C̚ĶGДVejks *2A15ޞ$*i4 {; 4V*}P(@`L9|](M6N%*4imV:B~BiT)6kDS0#2D5XGG?%6Wth.78 2_m-/Y!v7P=FytM(e'(kŋ .'Ij#gCнH:_w>Qי頽ūCC@*M֛^3uŷ*V ;NQڃ ѭ⨅Q8<)vL.ʓ.QPxVA.:YȄ«ٌhh񽑼@Dr4oyY07&=1/~>;x[Gb iqT4ȚsN0<99([^H+G3od0̼kj6ܫȄ3,fa]< D/D: }c6,Akhv^.i;SKp/~zfj;K2* LZ5Y GVwb"RڢO"RmtvgCti CD q9iOstQB,I^c=LR^am?gxKZv0bl1 =^԰I+4*ȞX\\VxC.ar}wyxz1@>5f#%.x0A3cWj1r]' Cxz$cfD3@ 23WgeFN'mBOT4C ҙe(sx!cػԟ7}\L*uǵ@-7Om|0'/\]2=EiH|^EQ6k褽e>W`y0ٮ{-B?ܢX,eI>QBuIBzq6ত`G*-ɰ#S[ϔȒkmFWyS͕QQ0M>0s4LpP@O=(8HɇbVrEd. m_C?-g2%Q.V.~z&a,$cH \ JZNyi\Le| ypŻshy #@ iSD >-2)c*VLC'ʹ8ПsOBM>"riMZĒ^힟;^yO`0"dFBI&~u~623{/Ho t?",#{%r%X+UL/Yp/l-%RBIӶAyXDw`/!snk٫J~zэ[+R˃6⫫G>G-|xުT\ dIảr$+c皐}}qѱXCRHyC  ׇkeܓnW'隖ANZN=PD`$>NEƟ[j͡ߙ#Tu_l#VZ.6AqxdP#>N$3/{{Xw>%P~gVMk=*vAr8HN3quͼU7w'6Wq\=р_V@<*n68Q(KLhdB0[f̸=ݺ9>kk>yԒ=S"X{v;C9fmbt?ؼ4|=ûd^1 %LsX02=׷;&3nەwVlcZ p -2MQ Cy6]?1錖Xkkۍ lIK.ēc)9 B^grʰ]~kCh-i $`GnIR;:T+Y SMsC꧉.MOv`Q 㖴.rAff_BMx)G~*2 0v$o޾\e+6 Ed7vP&tg ʗnE/tf5Шr up,i=oF 6SwU|r-On[NKsZGqj@"ڈ?ʼng+U&a#៷R3ѥ;6"A_DƁ]E'r}85txu{#k xQI1a4 }ٗR ffZ3Vh03Wm;75Jd Xu&~2`S&\3S,Аmz%#ަF_]M,/(}ĉO,K\YtV}U^?lRj1}_:  8e+j  ]&!A"Y1N~^{<ϩϓPâ=;_겇 g *B:eNch)mL/YQtUROG;1m;S*mp4.c߉& 2Lwu8+c5Rc,J4, 3nw,3EB 6{U< `>qu *bR?-?nYD#z$DSb.e)Ğ&c~r-?>e#`T=IѸh!*ҩSK10|3/FaxlOԵ'=IwQ˿5 /(RJ)Y-:W ӦU0P7Cڲ<'I=.\UУ^}61sTaRhWc%O<"dS7NRbX~J\gڪ (*l(28`b ,ξD_ 6oy/7EaMbz԰nCT3>j~. h~]d}Ey "9bHKRd`pwEFC3>!S4 L`N TzgH?Cgf83U ʟxP67H8/Uλ*fVuh$muJ6wj]MAad .>n:'mƥ>V5;Ջ⵹V5y jIB&$ۯ]v }G9eF-S!(_,ߤHK]o8>6DdeM_:BM6Q5&4CxDF?(;3 cIlL*PD"n-,~fRmp40otKDZ'Fa|$f*,hdC8@[v@i&S SaG\k@ka1%lhڶ^$"YM`aG>P04|TޫJbwl 2FEwN&SE5 m ˠM1Bks Mlv9.s|.>g@i tI?'hoToהQfD_Z9Zxeb!kі"=}l9|si0-m\Y;`6*1kNeZ* Tqs;4^}aW9c^>u *? UOsPo9`PEN=RpYwXQ5#"c1`h3T9uf-2>[_?KwU:i<`Ζ2JghŦ4@L,wvd7nPWt ~Ps[J4+6ɼNwB|똹p,l|a4~.2bl^F3$@;єVi^u T#o Pm-8v%Bu/4ߪD*&O$[sۚp&,I*}cw5fB1$BR?1sdߎ1/?xǵږqQafD/1mbaQHT=[Ύ̜wVr}uv%)MuJxӱ {2:L!&ͣHORv|\zq9c3N3?ƪ;΋k@́Lݰ7rdcR(|[5F=tE{~9S(WZb3䖂֋eE3`FI~pn},"51\sjK%73Ƀc~ z T$k%8O-;$A8^HԤN5U !BA)S ]~v)cUF5wD=!e S @Ek?G e ?r+$; Zl'aQ9_}cX9Xf WǪ7) 8 -5uȵok0?N6!ݲ|Dʟ!5s;zQpЫ$jv@YC4%|R}h0o,,O&?f&t3$JR_s-/p6XH$fgGe(A8cmYCkŎhROY߈ok%Y;քR}r}@zhHc|j{y$nS}%̡# Ua)f؂]^.,BtHkLmBGHbO[)@~Ϝdžnw򃥝 ʃ_h E\K8X@XUV1 Z.,rFNIocZ&T)C.v6!Gn WNbDvɼFe RRtyB,i^)/+SeCTD,N:^vV[eF`m)859/K*?OTt7Mt3 fY,)R >QY>ok8O9c%(C,W)#yu~xN؟?qȺa&ybl}8ÿ?!g'쉅u;;pOۍWZ\]xO[H~^[P7j/B'~|m~5'3yfFRCG$g13;bxu:]OrTu2@R}OiP1M`F l~ eO ܽ4]y1k<(w+k Qy.!wePrͅ ImѯW!OwQ&lfW4Áf:zD(ih}iOxFh\qاm WV>fe=lCf.N[[j;,FBI{%LO LY09o5 8 #?hH)Э{k;L \   Oi@=w]b1b6kx+/PA%uA?Dэ 8;fP4tgR0ᣖ#U0y4Thvu63;B_ĆU.uP']wӤ0v1lu- )E`)XL? sF 茌#EU[{KL߿үB8[W7$;L QFB%XjFO@R1}H)نF}Rrĝ%tvT 5k > +sO{ Xkcn/|a~OJWFzm7N{w85{Eg7V/*!?nQsAH̬YWp)ю79U[#vvT*Pҿf~*'8?bN(UdݘڝFqo"0Ja}q'ލl';#Vh::cjr~/VnqG &~'kgUnUFm婒 *d1?=+4`z<6  "0޷B8!H#)Vc}2 6+ m{cUL!\7|c8dȉ֒vL2WCNtJ'S7xpI.bB1#يtyOk0pu LQdbxbXy$/7`I TO{ݘ,IN\ѣ ,x<Յ75xo3Xm2(OѦ˦=@ߋjى;/B򬹀,1Q4߇"aiK?/ppMf^6kβۃLJ=UAO9Z2$˂jyv7,{1s|OIo? >w;;C lRrƫ3Ƹu1)t{;nWIp,0Mn¶]JG8\x<8 BB?ӂY#}8%[]zMR am~ȋH]ǥ?Y\z'0ˇYE9"XZN0~vx3AA&uK7/.cTsz3Q2˄hhx.Z'E; fXVP9:?=YD#2gq]I*w'X/6S5K3Ihj%.eDAI +)JȵLoS~{o*FSbp*GOw>x&^o=NUpw1Eeĵ*WR&Iӏ22OIKGJ]]ON&˵(O-(HnOe(N)ŠMG%g}_ P C/&E:f|IٴBr7i3wwhY:>oa}`{Lz#$zfa*!@CӰ":T>nD#WiZ_[qO0uEh"&N^{H r$E~LH2GȂ adu3&SFUh3+"QE^4pnAy˹A wŰHJޙyCԖPh$ts 4Us 2};!`kyD whw` | z mL) %L*䒌 3KFlW_ZY3keb{&B ^Y& T yrAb- [;Ou u?d4/ G2_' L9p7!x׉iL`:q5sw\hNR%!d1Eo׍ӯy kPY1߃%J.oY̘Q}6ڍ}/ɑ8˖Xf+I mvRde }׶=>g-u%1Qҕp仙p-<&:84N IB b]+ƎR pG\:&zcKF铳DvYH[{=z0|~;!}W[hT/yQRIZzݚ2F˙r K$?wu-aAIJx]<7uI!:FvmÙh(|PUKBI*qI`["!M)&&Hzצcq@尃2B$evg8E}RP'ke]~6 zN-s7:Ї\`]a00ؐ_ֶX,K-)~nGjFHמU]Jtb d,`}9$:AϾm^FKTVNX0I= ާ?]d O0K%&O[%ըUekO;< qFa-[Sqo{ RBxؐ"E(]"2QG_܁hBb1sVlXeM$۞ _ܴ7IL09hO$0嵕tvFhFF24<0AA!GC̬/Yd>v 5V?ٚ"SpMe})Ơ 3/UAi~buo;xy.>as\c6TG{sD0K5Ah Dל0}Zs1H2B!&UV/5Ag}.rcfj`<~IObEHsVG`}@0qA>l|MO<>U9%&}L=94aMqC4fr]b.{oağn~嚄$oo ]D;y2ҀG ^=ވ~S((R k1.dC9F3Bym ݥmxrX(}aDXx (Cr^,oufcQ dt',U9A36*W3"!XG#9f^ t@. )p_EhTڷ7=KoDz@NcDq,ȒҔ"bZST)ξ?ǔ uoQjQ%﫻9Ǖt]ٙ 3ɦ|ɉ˥i>1L=3̤qv`b lJZf'6?!~xl;j>@> tL8E×!QW߬[m4m@ y \XCTEb,~y+z%OG ~& ay" igxFЗA({'F5qd)Is5{SBC(- MtAi^B%zLm1 Cm۽2,7^#DvchPj;ck5^Yk7&=9=a\U%J!"!%E; AMVW7O:m?2;ffzTGsV~jIE*[m[c~=PS ".G A_t] /Mw֖2߆$ڨ2*LyK}XVNbgewCzkٲtj˿V Y}C l7H1p9VNN f~M,~wq Wc.Ւ`sїQY *߇+4Z{ $&҄@Օ͏Ac$o䳇TD盠'Œ@8H+E \X5ꉔCg+KGQ~2?ư]e]+m)-sNTb| =~4[y%g7v=wQO!j_L6h+")Tue(wWbaZm>s5H/3ɆʻzGpv%^2#doo@tf@A8R;̐,jт]W#o F6]MvVe#%\N;H6br] G` wRC-ŕA;NX-/FkO7ܔrNWY4BSbwӶ%@C @S5G!՞@\غD󁜹R7ێ+lsg"O2xxZ$xz:75^XǸgA*`ZSOʪ z Ơ{1''/۳v\{"(8 X3jCt}SxUΨǽsz2$gN|PO&qi w&)nADz2G鲒VA̱tzr]N/%h n m.ı,"--[ˋY ցBxΎH$LeEU>rrRmriLMPL&ce8Tck|ذOdnb2}#)ia-=<X=0f5 ޹'+IM^//C&!e5^[r;-5Hu=N TD8]tHKڎV!B?cuV h-R00&bށ%a74FmiUO#r/SsbO [/*Mɝ[uxVᓕ%1]HYk%O!q;GL&ηQ*x+_SzxRqDoQcT (ct$\˙ @l5&=z[A{P!0 8yݘ1XY 吊6Mf^1RJN<= L rh;3L~բP yc.n]4_(Y[rXAT>Al{cfEGi&36E<`֗hEJcpҵrJ{݀\&%r:g 2 ؼ &{Lsҫ6Xb/zAb`WW۠%'kÈq-ĹObi mUr:y#0k/# S;}ErlźǕ>w7Z}D{!#/3aŊt10X-|8o=}!"ΒGʥ;~AlV f~|RXML1uL.RBȽ4 3SKw*ݯz#w5>@U[ԟ:dU#BCF_UȬI,8Zp]VSD c;[,CrPUȣ{i'c LqIjdk?Reo*OkL* :欅UGob{K2C 앿s#&^=XxBJjD!tBhOcnԋ}?K%vI50B:v$j^=P$g9yX,X2! Jv_PxAIVNœ_XywoPsYl=<5 A̪n%QqH݅8O!5y" CF8e1rqf+ -l?N $_|r+>ϊJUBVMn-c=I Ik >DYH ~߭hpi 3Rѹhsy:i-lPerDJU`{y*^Nq3X+KՉsa> 9`v٢s5x~ LI(Q ׶bD*`霋9P. oMEk) 8_b>iB4^hVZݎ0;PC=^*XfkapU|a2 b.geLbOHmc!"M\u7@%{Vj#*-fafrڶNw]S,6SG'}?0C x5LHvqխTI Fj b/J`({Y-bۘNX;,~: =\ڧҜOКi)krchw <0✓3|\<3QOZwKI'gF- @䦤z$5j`d6D2Pz̊FgcJ}eY셊kIh6H#M YxKŵn.h u '9Sfڹd5zjbai'>at.x1G`H:Q۩#Xf¾ K B2*;dޞ86,dM\8@&/Wrj U ]j5vệ"܂ g)ɮ6r:C+b.'IcR; qGH]4;ςh3+qk(m]p R ޥ! qE 觇-!u[88Hs \dȢ,ӳ \?mcAjsMm\HzrHxN>͐wk:!RB=%*P%PymƳ2>??;?-45Iѫ響(+ UR^ Xc҃HK,&s48h\G ~L_߭Q;3gdCK:&2*Ίb[d0p>S-}}K-BpT9c&hB{Ǭ2ji#D~ >b6܋6LCjqo9G? #m* R)o[>^IhdM[|-'G}aX]:l3lr\u$*)HlƑ>Q{@n*GAO' oYm=GV8î4/.|P2=avƏzG# dEsx̿b-bP<šN)?Dub}z[wSʆ^We{ߡӨ<ۡ\o*,gvm ~ D6ka6 .J>BwgQfN[( E78EGlU*,Yt^[/y u1q@)(nL`=WX*&J&6~éW {T_=96co2 ygN@'\͘LO_Q<0 G وQhLS_ʥG4oCX |6W"Գ'ϩB-3u9eeN\oLmߩF6 B3F0ipw"ArDi|;աFMa3G-I(Mbyq0J3Z*ㄷb 0NDyWSmVigNz9N9%a{pf&~c~?_&̝ş^^-)tw.k$hSl5UdL4˳ {؞G'}+ PG `*oa[qFՠS$e|8Uۍc Wq٨D6e+m$sch~ANu8ؑ?cSpiYȷXek5hJ/c}eEQ阪DQjhX3jMI46"^3-EwY^'ss)}-v陟(S?%ۙ q ]Q}CP uѴk' >x[hLp@lP3@ c&*!۳dMq*S#.:+Rr5՘m)q7bN An,* ŕi ކ;!ƹ+3+GBf" )fODw$2e *,F A1R⟣[?ĆFM_D{] OưGuWpU?Pk!SzCqTd/};x؛x'KH=hgb2xU&Rfg6g_lau`0?!aNG$ XYݟ{i8ٴ~r2yNPpg!09VbȺd)h lG! #RUO`y(XNqgCJ}1ۀ̍-R*m;1=xpN}dg1$.NrtFIޡ3ɒ)t5!*$]J冼?l.^B lD:06FSC@vPDG `!܏K ޝ.vi S3V$gx D<,& XoZPk7yU^n^dB)DϻˢCAsVvD,C$Zb"#ٸ9n&8!!>fkZWrh VGwBtCNKwWV3Zhn,d>'ƹ4qЎMEl ~jsɂoɑ7jEO1p4?ʲ§WsmBH6I@ /l|d 'j~$zP'Wk Rޏ9W+t_GavXO}`, ]_DM\~%Jb(5aMY;9Ͷ&83i4V̍ C)),*N,pP i]#Zڷ);0ZTΉqKtɉ6Ѩ{2~$:+F;T4ݐ^ ic͏ϖ*@sD . Mz}6̣'ϤWrk ɱ)D>O~/N*O d$n{gfׂI8[ՇCw4b #HtXݚ@G'x;wGi oK1~hISÎ,<7Y'n]v;EV4zϢ٬15ݲ A]" )Eqam0 k`NBԭjɉG༭t@,S—7$J˶%9jj C03P }v51e*d b5=m$@P{) Jp$^zUᏒѧ"9q x")?ah큱D<.N.%Faof;=$G~a  Hzi~hq$ťw{jJJsDЗ,M5t >u`Y&`K$u5,\M)^s5dd@N)'POYvZA]D^jV×rIY( Y_me!6? hhYIs~G&fJ+,Km沧^4^tHLs:?<6 XfLa+{̏;ܜ9?e95wrHmfdJP+dzΆ 4boTQy1Д8ՙ>þ6-Y:2QeDY3lҮH4Cm=m?ǘ.cCAxPR w6,4:Ln6Dó%\:|,fO]"{PsDTܠ=tWvsz7j\IJ"s]E<cDXn ٹf1_)(@ m6cu&SzHt6A3)ąA]r -.IƷYMn92od eI.VI;7<L+#F*'~$U-;JdK@J>_#̲+#goB8Є 6)d'#Y@dZ\)(eI{#!3tךx:3gᆞ5i!rh0kC&ڪ<}۫ûbcӳU2zL[[%R'HziJ{WߖˋWʳ+Qf3uiZJ0%a0f(!@OȡN,Ǩ/$TM^A$cit[Q&F6ϿwZ>kk>5-3~1& : d lM `K!~K)RP7rͥl6 I^!tȷ&}ewL?? Q9㳳^7/I?S;HgEd8qťaQX?1+VH'Lu[{`XHo[!0kMx.Ybf65@.JQ#i~ϐCiӰ367tJ zd+ij) bm! NfE.En 5Ę0J $t/TXb*>\\?p+s*;,]} QFI/f<~v8\n)j; MlE;x3m~)'``lGx3~vjAh)fDX yJVh:z`~:Ԋ؜6s05ܪ>_Z,n<%S\H iK[ 3#"*; ]Uq\anχ{tp.e(^gJ: p7yOc]a z;PV[ ajN\Uj.谘E/]!x&Doڜ[ֿ5"7YJvzִTa:!쇘a6߿d/HkV+˥?ozߞи־;Ör:]c8+8PUz 7Y,ICf=5dr~9iEwS<_`D[ \%%@:%gC˼@2"Y=|~s3F-1Dx*M^}V AC:.UF1y@_]A,C;!X$s;0@nNBMg4@fMΐ$ bn.A4G&`mC <3)fD%D*CK_sqn.Sۑކ^mWqSeqCs@ =DIY(QKDc@%rm <{N|Țe' ߺk&FtZ(}tR%^zs9}wOֽqꌢ&rban.ۅ^ž.%E 0w$xs{9 B&mjo\n@t,~tE&:l;}RwTn]S3O'Ksq%f&y)'aldED/:(ʥx8l _`4Y2w&gZFK[w塉3f瘝YG""MïBm wIIijCw'j T{]Ŝ9Y%ЍzX(ߜRǮF=YFP%=º4Ou(RzYhF_`,SH݈jZ^PGl>`utbbAT7)@XɑRR;Ceejc3AR2HnF$+j;@lI_'}:¡}(J)캝2 +%1@ P*y꣗DljeN)UqMg54Nh_P;6>$$v~p𥉉dS *\Hwc"\$, y"M4ȽaT(4׌Xd\y,bp a\am *ORKf-ZQXwHjyct1]Rx"yuͻ`7%+rR[}%QS+1TR`xKܱ5;p0ɑlu\}Yg6Ć EA8:tUJ k}\!TS~ 'VAorR8u9TY䷏ 4,?:DuMZ9luvkN|nBgI`x0 ɲb+{Hˆge+24rW1ČaQUihV,KR|P n72y&Y=S4JWr_Yv?Ke}o|g[BXMZ,`R~!P޵Zd (MhVp\Zz|]:LCsCqi',O9awF6i+Tdi'1Z|HO ( GQ226*d) YW}a1\"7L qTenֽ\2T?sjZ:i{ !xh9Xu@;?E/Wظ[~;)*5"{YH@\&7G]>xK@| s 19%R&QOϒݶS.-)Aک/=U,ojp"B^aT_eX$ 5Ч*[VD4]tfG&{~bj6R$ZlnMEaG@Sgu6cWckpC2FR\ ꆊ0jлYHkαsg9BnⶪԎT_xT VEA>URa_3p"?X"-c1۬ˣ20:S%n@]+|ħBl25`T@x2: `94?^z\;҈=u> sj ӢyH/7%7o^=7({LGoW?r( |y~% 09֠|s1yÉL.gmtHb?5_\N>bA9+´ p}>ߎ˱cj7gILqi7u;49ҴꋟQйFq/샰O̝[ YX'9?3ANl9IS9N`Y4|zV会m0,zr#.Sa,/Au/($,~^97Bɹm78lk?*,y͚e B~> b,RVTXۋ9eJޕq1͢;TS[bc;6 QwYmȦ6,J*Wm1D!QEw)FфofD2NZ[g~w#;$dWX'DK0F 2JahSݸ-#Uj7Hj- C!slHbR߈˗D+n(P5H7ϻ C/C﷤k0PqD_jk :| **`ipV/xiwpj+O*7azk=ȂAxNH>~`"W*@uBwȀxhV˶ٻ1nrB4s4\BP-pV:3eu#;-?sݳS)dq!|7W⦘ՄA(*C2X 0N3RWJޕZ 6ѱU~"fl>*"AbqY 7k|:;yչ6m &sl_!e~IzvG^j 7|a^c6D5oQ1~ #^Enn$>Db~62c_T-OvR-uGŔuSE/b!{﫟&PM#٫v$8҇ `Ϫ͒ fSPBGDGl\8?w:(CiC~~#U> kS%CKP0jO Qj\WW˕,Yt@nk*33Spa$IՕV^ >ua;AIE>.T'Bw61"pH Eѱ1:,k[;Yk ze+![mqމ A6} X2O *IsrEr(Ȗ'R{O.Y2xRI{ /ٺda+neJQZ\Zfn,>J/[I@l<+<"zn(QyWT9&>Uj0ku45"Mf|0 Xal/aaIT5P61(W8P+H?-gN$#<%oVzrq] uYv <&D+\ќU_d,.IHОV; ڀ$xh4` y&r%4r>k*qgf! L`E)BʙhC,Fd8m.t(3)X!(ҠTجv68O9O ~ᵐ+7C JqY;NmbEXQQ}6kaRoX) YbkC\._{;$tI.KnS R/$L~r0UagZMCgRGSbމd컥ڛ0Y}؄L{!׎![+v&D\1U]p8渽[rAR^nIoFiӷ¿ZN<`m $WIg|^=OeuF.]>&IE{mާ*'hЎ 8`xҞ:泐 ]wͼ W O*ECe+e D#ߋhg<<*@][s Ej瓚0z6ݝ^1f:g.B 1ΞfEw5·etu(CP O65.\RtD  1Q|gEMte\q6Fnh00 /&UGmW7N&J'h^fr,a!G Ɂ$`6Z AHU!(d_L G>CEgOp$'ӁC{'O8!]ɓP @ml2ڋǘGdeLK+%eǩNy%V@NB{20c9=Z\=QWiԈ[S3Ĵ0ғCyY<;8Y][osٲG^P[ 4$MbCYF {s#R>yBxWo\L^ d@!3Q0uP< 3rTi7 ƠA[9(5K&cVCh3.jdj}ׂ~D:25jc'dQ`(#38 ӦHo@-Q$WgB4Ϯ"]q$t;y,P <>`Ps-_u xP[ָfk W&_9 qrN2qG1`֧3KMR= 3>|lsԯOq點lNsTJ78SJ%L2nU7\ cO]t(n<=$H)v;'M䃫s#VAj35'8Mf*\ Sm#B%kNx"<59rC 1c,|t iG5zA)E퍊Q JK}p8xhc_]lA+_ѸԒ܎`[v*um W <:<-71C?YE>1"鲿<9J~Y.ϡ|fV ~Q7 l2'@KT~_D7xA)YRȃ}g7; (%K͙iK~O1SJUS[uP|(>nt6D[6ݽe%X0?b5X"@KĪM;G­ܛkIq CSYhr%qhS+<h- 5=&9$?PkuȬ6ƌnE]Gh r"mBv r4p(N@3yqJ2h/h)3A{=15' lcQ=ʜ2,L\hAP4jQ 2`{0oeU#yGR@V7UKQ|e=ЭtQֿʐB[q#ʂ,7[%o/yわvC"TBZ;TS@CV^bzB'A"vJUhlȽ0 k&C#W~M#3>2tk0~WVXơoHVm}5)jG͚.dPvzc@5 $fR14GG ʈX^ ndwT.vao ̕!OûK7]iJ?YØVMʁ=gDv%/rꔓH['eY8ӼYҦCט9>O{ =GC"Kc{a\:2f( $ E: v /Kڸa樇_q<c( {"uD,2T|P0bd+)z:J3݉mN%X:,{TcÚ&ɘWٳKH;['̔u/5R&ES]ҎHөz[~E5- c9k/滴)] :+xOdY ԃorx䧐>啇L6g^ݼ &|}$fc9[Zc#u@_aC&ީ}E&Aɗ_AqRq{2XE b66 р]xֵsHݮU(rቴu1hq=7LL W=g3xli4ush$}Oa5=ȫذbisľyG].-E~b~<"_˖?]Q亮E3h0y5/[ko{29%A>7- 4^W۝qJ*@cnN#ɥ@.yAG/ BG [|8b_q)gI}7,jZ G:aLrXk6ѐիyWOdb5㌫;Κv#Swj-Hg1q̌EQ;j+'_ ݯGOeOx Jt&~8I ɂ؆K v+{I7k({K3R "(CS.vgci.e  u Rl+0+OR2GBnB݊)Lֹ]MX{l'?[2UMa 3Vw83NGMLk)7ZG7TqMmj2-N*T6 "Hv{ӬF Ere]NYޗ07 |' kʵ(MT:IUz=Gha6⏊l_UOߪ6f]&ik'8N\Y`"FBO`w[<: g@~elOne"Ѐ?*3WGu.55NStlYx3e֊%x42x*>s(N%ƭfp"\gP,) 5+[b~k]0obo]@ծ+AfW"_$ T[doU?J^00oʩvչ6dݓG6jvoZ]?rȟ~}\7QHs$_BF&#O Vϗ?h%2+8 }=ag')>H7Je}*>=+\45Wr;j9U?;_hV>ufPfpUո 0o.lL z'G%.,޹34k4v@)e(|ޕQŤ gxUBy.  CA/F_,XXm0+jfC66b=F*UwPX1 d]S܀M)U g{N}gGB^] f&*"TDTԭS(W+Iw\qt.^$g>5H AL/s*rpav޲nTBmt!uTnuKjy lB[}/Ղ7(hj.Y<o6|# N&dfj 73 N-mO*?CQI$܏9¡~RPJ侜CG5'Cd!l΄Z1z~2r6HCBIO s(#uk i=^7T*!võw' }2g{F}u֋x{/3o8 S" [@}r< S ㆈWH0Vîl^gv!6z/)?N!$5MgwQLWT&m;s\G{x*d c2ߠX3ȕU4knzV<}B%<ج+(pn' P+RaF\ <)lk ^=KVU jL3@0z\zYZ>bj6Sr{2ܮ'aGIT.ʒZj#"G|8oJw C=Η #>T^x9ۂ/F.yx>@d|S(JW_n" heZU]L!wx,%Iu|ЮT;\7Oi!UH+ ' Vf4X//."P&n^n(L[?BKrDl pMU)2!IfF.xcJȗrK1 VլY2N[4q"6O`~*x V<6]PB .0Ij򄗑4:'p6sɩ`X1x*@-.t"3> J &2#-\>g Q& 9'A~"e ]e# MfՑ$ګ!%^\1)V[٥8E T~ / J=B 던#$qSy3]٠qwyyF)|x1/:) ZV;!|KΪ̱VOQQ "w TLyMM/:GbUW&JeBp~'K)c̓>.MM8*]#SbE ?éQb&l!XeywoK N.a`j2R+t}kxQ`q "MF,Qj)Љ8+`ny=ii딙JjnYSظݏ ?APS+ځl(|+'T{hĪKpXTzpuk}*T+*;?"BD9?W#F¹[|+k4O0L+/y&mmʰԎG$UƧn ŒM׆ ?[C0 ,Th;bc-YT5 α51c%4Nqw?A*&ooD*yv&"Hv h(0SpyǤdT(g)}{ۢ8KGx5k?6;?wӖGO-оV泋nc7 ʨFɬ!Wqxa61R O|UI(h| ȋH^}cir]tXݿTo᪣["橑$| ȄO<\h,QZ"L\iC"=ZY+f7!A" +\Fo{vam_st\D@c83i杫& P4g/M~U)cLg7H$1sjV9QL_!HZ}1SQ=$SdsuMR<9bU9Q /V-MWRmš,Nl6oȃ/n`=+y"`be|3o QR4RwINﴦ4uư[Fs(> ?b/,*TK QYs+Ν~ُP)@E4P)|3C?whSy_ ?}2Jh~ k(ckd`/:\ |r7I91:] @as"vEY؞pPo=V+-Q94-5/b_nʱ 8yD6Vt'p P5nGI?:@‰M>^\򁴅֦̀=Xk8 奝}\ٳ&)Gmpa# ^BtN?<~^rAyf*x1hN!7{,D8--HV,5> ŸgL%0Y+4Nl\IM!<{@eGMC֫J4JIJ!+q- jF./økñ͝H?mh' hFG_VPS]Ӗ˘x6jԺ^D!)\1P9\[lE$j7K)hOgur0j#%mfcoA?Qt9 GG,u (%:揜뒨Η:)3׳W%ӌ㗙YQzַ`:7@bjՕuBDܱؖrUtݻ ZAD.S1լs/8tPPlmbw-ެ|M2*ہjk&/,t{QZ jc> ڥ4]FNK .7V]$ˬymTu?S򭢁j=weUZ+=d Q5Vy*!~:Lp4lԱn('71\zϣ( .kSa%>֦5°$U焢fsR/VR.z~}qfRʨ%}-Ђ >x]V'R>FTŕ |Ț.ĻT$phصm%%٨ױ k1j Y B][mv1d\/^t /Y4IȢsd직[q(yU?7-[D7tHQH e2?8U~}J?4ZEtr]ZōH )].Tn*$+@L#FovGB&b^Ljvl5+ɕ`34@D*K9Tb^Bpn֞}jaq! yA!jC0ܫVvK`=(el{y$+WL]5wk` _=#`;,˷p'wc<|kE?]-Dp3(YUwR2{ Z`:N, EYՔ .3Tv+r)%a.Aw8{.SJ!h zWU_&'ar)8P댝iZ66s4!h' mX9L \7MZAoDz3ȢsRU\͡j%'BLH${ۃ.hqq̅sQ,~n?݊#"uUH%߸%R1oV-ejž\wva̳}Dn89-:b$C?z4 jX:wEojd&ڰSPYڇ'甲\,ADv@)lY.fP*3ʑaQ bD)^v<vERWST0PQyDtEZVT(6λwno+dqG𸷿՘*; trI3uk:ͩ};ϒg>*K9V)e|?S0!V{GiG(T`F!L(g}*RnoY8Y-$M2a pX-kޕVUIBay%1B ZUj/B`.2\F2kZm+XDAak $rt΄ {0x@o=-4yr%ҥjG< z5uF ihyPYT翥;b_v7"eɹKWʔВR hydgP{hfAlĺPg\Fwf< ,W?cމlGA1L[߲$v3 µ]-blvI@VBP+ _fNivz·~Rdഐ<OW:-U撡OleDe "pٌ2oCL3 ɾ1%_ *ۻtY80F'0Xd؉|3r~3Z0m~G>arrӁTj\$BHVi;\һ(xssཁZ~A=X#=5$-ogcGl5G<~SP]fNY%ͬɇ!W:~w6 JQJnre&Bg<0C/;x@zNnnp"]!$6x<8i62Q`2D]y'ːHe1 ᒡ {dd NF)adn:ι㺲U" ]]mr#psUXuS<)wl3wz5u~H ͏]dvM ]J,뜼S9XB`ԻSѴu3KcM[6=%}ZRaYAzgRa<|q='*)* 'V5jB4Z#C*:`EW8_M3\5E؍+k(rkEd!SxQPʤuрnMq+1Ny'D!hd_AlP9UgӅ|Pv&lrVK=CapKK{8J5g0=@a$3?W5Kɍ^'hJמunF{|H}EtE!ƛ#cO, I#W-1,FZfp$5\ nSҿMѕhA#Q^m$I0>HuPsn#d|N 21Nw9O Xւ]KY*F45G!jIt8iNΤlݺ(nVt7H3o.YmzBD'c!q+`*ZsHk5yDCbm1(PͰXW~SeSZ-ZiS4x4hv̈́s !*@Ҹۦ8; "PRޣ3ghWe(vF YIȞ~ s)͘t1 Vǻ[ݿ#Je;Ud[W]qe 4 m6JXU\p }@jB`j\IyH #a% F ċ닙:ik)&g/JC٧?K*qu[Az~ey"s,?La)' ).HznO3,L4A}GX_VKL)$q['JoR/Kf-`2tS $[WeVC'CmAv)!&Zv&n \}8a!@3(G%sžԕ`?2@Wp`8kgNX]?Z\}sdMԀ;ifz+S f3J[u@ t\E&5 AMkUZ3CC}~#S-nMZpe9i "g͞J汇 3_Y{Om׋\R,l{g ?yLֈ.<-9 tiLT͓ "tC|+S0 II%n*yg 'hj@>KNaUC(Q ?Bt(\V6Y|sYsa \4IZS|[kVp#r(C| ! =cѣ A`z]oۏ1l-|KupA&`V `Æ%n'tVôM'7oUeQ}wvoNH* JtW6.Ў(ĹRp^ryBn-jؘʦweg/'nJ'u1OZ6O~&m4ʠ-0 s0]keq燌|VDKWj . ?Rv<* ΁4ENFM=mYF5zS*HZd:5tOcvm8lo;v0W#As߃ckɽCuH-MӘ[Ocnx,!g4&9dPJCz'0 nhz|RxxnY8։E5 ބگ}Y\˭~%1MuhŽFQ6iF2)}fI.w" kKpY/mn+Z]xH4-%jkQ^fk?vWx0˓EԆө1(7!bߨe遯f-Z\NsU:wﱔNޮ2ETe=)w<;Wd(55p,#Q"LtN(! 4>p4j=YPx=Gkf2P:br}EGQ;I7kvy16~~M7OGY^c'7uH4qsv +ZuA_0OfDܒN&m&{η=?'=f?ȌAKl 40CD 0u$9O'X ͭ٣$(4Vi# t"r7ݜ"Svaܛ~܂:KNLpnVcq, ؂6; {u[Iȍ }q$mdrǡf?HI"ࡂh!4ix~x$26+jpUxn~ے/+&G= 7樠MfuG1eneCTZ:¯_)sv]W4l! .<lB,H{枓i٢(њpX8;GG.9GطZ=b ~i&'3?{ Y,z^~@y~%9A`dKa>J}: z"nyi{͔gibG7wkP];u 2͙(܅5T5bp^ս1=lM/{{m*ݨTL؁-cY$YFG5Gzi WWj{4'ԣ~sƮ6=/gџjn e8XI׬uӬewNBVB6D#(mte9b)*h䷶LlA1tsž$;}]Qd~ x0͊P@:bvuD pw>@,mOb(kAf>+VFD_5g.Ug0+sǒWfHJUs.2@{Lejbf;lflE۰*Ui%/%N;E =+֍&r+ T팞+Z;cr~ fsEG*e 16h\t__Ӌ0cUR:e.unR&?]ᏽ4,gM|"OFS;pv\4t C_UeѕNy+TN+y2%ߠrm(ԺFR8?Z8~LqN*#Tvv eFg8_ adf03TX L~C@wM~ [-Z2T+nou#HR6|6f RP@ k--)ΆcCUpb3 s~ulhdVS;i?|/1T 55J>5MG*=F^B>h@3WOrcvꏠcDsˌ: WIV'#g{ WVcv"hh+d#BzelM)nJϳ+Ϭ+ |:KD"C@uq0.2c  :jU.Odk2<ŧp5XrfCz-nm{ôtZ<#*XRĖu@T¤ǮopĴ7x1Dܯrn2,udѦxNMi)%ѷ6(߯ 8TWMkp?i(&o5C۝)h>pK?2v]K5IsF$g #lN' 3] m ׬v@t: H,Gb_Rڕ3rˇhT&.0c .CA| 'pf[LJXiRXYe/&Mаe dLZs_@5SFG@m9ST@NpᾬDZҏml:L'WɥoZFOt"J"u䃽&XQV0#M?vNcդ'sq}u~^.2dnU킿Mn7X7Rѷ X lÐj3YfeKr3>-!Tk15}F 77nFSv<K2zaA*=i_Bޥ.q8WT)4q5\(tW0v)~1k6B旌_f5ޅ෬ЊNPdu-ؐ~A)썭Q9? Hҁa[wFKHZ=y8Th`luQԽںIb}ABsqkY V!ƺ%&rVJ:?Ӽ- eyyU,,B'zـY$O,d!N² Ad~JKF黇ц>[ 8':p}ɏX'ŽҔ[ifi5l,Rl)ľA]ng(d'g]^Yl\k _7ȹ S:I#y~~4r:-^ޮI)pנ$mb}X 侦uFs6RqJýF(/h_EI{ȶFǨ?%ؔєYF"Qmy z)3^l+E=ҶP ׾]1ŲucH-x['%l"0%8ad^ewJr ^L]UGBuAs*]ZzJ1Zc]YB2{)p<ȝRoD^v?ZNxߊ~ x(pw/T{gsĭ +sOWWİt*eQ[/8i:X)>N|$q!׹bG {$&_o4/a8ۯz{hR "Cqj Q@H:\dM0"c+۱ݑZF푠U9"c c/.+iEtq$ :^C~`aQ)uu:w6+ H ~Meou"5?W@Q/9͌۔GG)$A/kk\rM,)F&)D w0i%p5Kvx]&nAy Vэès1qʸ|NfwoND͛K8[@1J]$NU*^ :kCȋs?0#.6CQB(;n͵Ο!Ⱥ_ A/W>M/킠 |<#Rj~A JS 92sJ-zz{+@l&,v 4K_\ן7U5")ImB̌¿ VSy͏ B@6nSNh+x8HεEn@[R̔B6ll[hO7#`ĪJvR3%\2Gcp?c;G`#f1YГuXKs=ID-9%l+d濫u' ׽-*賢AqKs9fJ'!Zt'Ӓ"Y)oE t]\q‘bY=]Ο4U2ASVQj1]ۚt)xXM1Fس8* :rDm T9۲W9E- 凬L51<6c'7Ld++YBR \ﯘ3\igVquض7]Ksx3[!U6BճE];w$閵Cq/%6˶F 7l#4n6pjzD`62d`v*-lR uB4*/@M_|v|5'@=]ݕߧֽu+Z-7cҶ/F2]N$ZHD}B_"+)}`dqf-hXk!vv 8'.J=軁!Ȥ9y썠FFqX~4߮$i+np>L*ashBfAݏ y^xO^YA~N8~K,=ݻooq9ySߵ_짠@ «mz/{΄*mp c#6m 8 a 4C?= :nfcy WuP3ك'~S|\W.AuzuȕCDfKk{٭v'O&x:gB1y|a|޿'Oulgj{$@Jd2[9K<ڏb*r%:9~Qo3eK-[{(XDRk(OZff9ڵl5П񂡄/ݚ `* Lc]!w3#%x`EEMu2-,ŔʎH%#J{AJ yM]eG sr1a.sdިhM6axܥlmZ$ArsA_%&mWujݐg3o?=<䅌\_킃DvH`1A$A:^,62 u}^6P2siy߱<󨍃Q)PWU+B'ݲdxO \Xʓ O|ChvM6!vAs,@QwvUօjPWX{I+bhm@4S0"b]bV1J \ETcc!7Q,3 u$z E]~dol вW}S7ʷi4:(@k@sfG̔[W]0n $Z9$0L{mgiت6mxZN;C>fHV PKf1GX0 ;CݾZC?&{.a5 u+`rݕF G_?`^ *qj0sf8(u].Kʼni.]e 3{z *qJ*^uҰbж-xH倽,gRr~9^A9"ZAJ Da?-G_ ~aG@~37#QPNg:Uy=~og1RsuͧTLgoXꕫIt@ tRtLP,OJpv_IR 6Bo(LX^t(VLVs<Otj6{ūϭ.[]ǶV@{DvdFuTFBMlz# R%.M6<óﴙ}B1!6^1#CdT\wSgPP%F7dD9jE xx'oB]~Pa~v [a7iص(3K[]y4F 5<ŗg.| Yk|H083iy8~<8*76{: r*؊ V@ $h )вe˲(KDE"ҦS5\tB(#>kBy ]S5 v%h%M&7X.d* U*,8aѬ"/|裛)o8(2hSDIIg⯷62]{w!Ə4GG}q ՗zkV4+ķGҩz >?X߁5\9w=s`$a:z %t噓KNg *Q͋3+ԣG;td)i(Jr99"V_3揩ؼ6<8롈+`CƈEiߞ F,0scwA|RqBV, RVppsbd}uΓb% ~C,#>\c|vRm ska*r$CIR͈JMI{/SluKM(T&iq9߷xg3.,o$ yMGl`0i_q%o8 ۨ ]R4-rQݚ%J r_-7b|zj!fEHJj[z @/gT"=Jdͨ`dg.? A&C,A;dՠ|샹% NjSs+ѥTqƾhY4 ~"iGoFTs`尔epZ8zg8E&9k)W*uB 8P#N;/ <[!#LeG7T",9RaAjrSڜi#`6q`{nUϕ+b*`r(#Xע ¼'FУU eYGZ ]%;<;Α:ξՈ7񁕹 55 s}92] Yښևx"Y݌:fƾcY$8^kj>h\(‡U3}2se+7^8,Q΋EDC 2 EvAnz}Jd:v'w#KƁϜLK̯!й3\1-tfۖ9s ~*aq@ì5i_v/2z)0!&x]}?/ 8S%$ Udvܪh Y+Oȋ a)#Aikwq-qk3f5]YE&jDR]$xoź:0Ę#-.Brh8bE@,,cǐn~o@'E8}vE5vu%&uKv)g)=1C%cN =Jcf3HTLqF٤ܔ&%=0B*MkiPuU37jhHmN$I%lEd?<ۗ-2#k)mx~ܡ9g])p2bXVhJM\@{B5&xSc-֚q:r@!_s޸vnR/'6Y;"k,H#kk\P%UxAzFV nf g}n2 摿ad2_1=S]MRpR KZ_9~,qG]Zl1ڱ?tYV 7zPg6=utݒ@Z?}VY3;@ GYxR+BKU9\4/[# XUy2/b7[ nKE A2L>\*ȀQ=:Xa[eHLqrFc_?UJ8Ɩuc4 Q 8v#~QDF"ex8yD` TTm_vA)gթjw7y dbGwdVɒѦc7]K0MP/"Z5|`䳬w#>9)cf!(@gDVFiQ; %-9e`6Buy=@CCX':ga(rﱔBIUPTh]@/ %|5q5y ?J)lx, Nn=7MF|fk*=*,thH-&#͞-&۠  䧙G%yzD1m8K}տ_jz '97a #It/7,&ֶLdio)m,qڱ( ?y$&20q={jw21,.׸1.zt<Ѫl֩^l ׼`z6'jq NqF l\C&+G;4u Y1 4*V)i@Ǹ Ny>~ sm"t}CwAT/uR= `?ZOZsS<P,̙@%Mt߭i<0lZt sSdA: 6:OG@)Gi^zΜݍ )|l(ҫ]a3yթzve ʱ*[WGN-~(8d- owXPLBf+)!OOOA8#\:{`$}{/}LX:>2S*a) b]gQve^FX^ۆpY/3rwS_m`GuӋXƯe2cϏ`:  Яt>){Sd`sVKcDh悩3JE# &$LD :LRdb;Ea{8b QWGvEW=r.u''I9W Smˁ![4V\ l%3&Ď~Xm5 !foJ=4AA,XQKϊz@A?RQ€;36õeސz:@ԅSbmPvvCL!m}trfXuUyWjMv}|?sC} .{ݕt 4&xer0XܑzxIxҝU,p`H}S:H8# 6= t i\KZ:1R D7y3KD#F^wPGCPo54,I\.:ԍݶHV֠>JPǹJ3sn*Q I7.8\8qA`$RAj5\/Ѭ]b>Sd%# 5+΃&6Un vtW1] ڔ B>y@]CxS J`B3i_Xq!5:fŝ1_4mi컌K"p""DVJEw\qNָ 91ejJ e?\_J [ETyoRG@RFny#\A.< (mťbq;YC7\Viu"̗]8-FR)B rP~ˎJ7T / ȰBcP)I5HDžSQU/.Yj)4 Vf?me +M (KzyyX͏DoC)Y Xw\Pj]wL/'9ϓt)ٍ@;"nNxa/I!oOjKďbAw~rkushP^|88@"⹘h=N 4yxs\T/[4?|sRT `dJdO=6~7"t.}"yʾ` ׫̾{T_dRyі=+ ƑG؋ԧ*Ck5a!SHs#^]Ŕmܼzu7_c]+ !ZZi ā}Ç=X.ӬNH 658Hl K' ~ ,B7q+t{-ѫ4|Lhb~ӊ+ۍ<'0֠%`h(?` 9U[xk櫻0時Pҟ; NzkG"E'5\yMtOMߙx(<[z@B&I ~ΨIL]@8bt19RМ&T8KlD8^A( E](#n$"S]B"Ʋ4q?DY9Vhp]@R?RM`͖rYF2oDAiMH$>CHhwǾb.C>>jj{Y}xs"̈́rPb2YUwDn2@/e|ɟl njv o'^A$).Yyqÿ'kLn޳7 ,ª}AwaOֹDD%Yj  wYEa,7>'r*ԧv33\ϚǰgÕPq\R#p,E@.ݩ,O\"e^*i4GabI}`үrqm@\#/<* iQ;5Zy-tcŴ {n_'湗J댨{qՙtH@ߥm 0%DX \ӈV4Gt].¿+r4!Z6˕j.4XaT7|O;[h/]re'1c8=&"[O= U~~Ҁ~[0C6MLAgJ! peUΝ],,&pNtE^pssyg)U|Ud~C=#K@p;i{U|tY֚L<^k)Uãir 7՜[r^ Cc휙01:gD ?v`PfS#"q{u'Z^Fs;aXUi\K~fU39],Եu~ qSV8Y AEX &nk@oIj3/4(EÍgFQK~)$\])AKCw}(;<^R:,Kx $^޵AZ߹q_S#Z殠}m28.` s-F:i|~."f''Z&VvhM2mHv;Al9)K5RvS0 )j)  <ϑADTt|r^Qh-tݲao'vm;TЊ1 DF SI+`'տvYH٘Q aBޘƼbb4"S<ȗC9뭮^lꏫ!]/XfՓ"*aV]#;4c$7_wQzoFc0[z>` 8D**Rjp|Fr 2j*ShQ uW>0b 1w$L $s3H7h7~fm<^)I3G /vU}ZUB,m4/TΝfdmy] A`yvWBA3qSiK9ed1oV3 uU&OX$ @zsJZJt6eQ"cBbF;mDN0.{9 ~ra-Bònw6裘!X ܭd9tSJ2Nٗ  t%iv%_ V잮,BroHE A79}_TrᛁFxX.)-ﯦѝ!9dG(LE9qioFM4JaG⾨EC7.2.%ҥ4/3X )k @|Uj3dghpԑ +J=cv5fă?Ac~_\8 N?ڡ6֤AbT\GPQZtB/r.hD'i9 nTҽ,jHfSFaz iSbuj|6Ӽ;S?c葊i2JXBޕ- J?-/xFziJXf_ļrpgxvȌwػqA p?%}!xJ2Ԇ,w/71.s9{BI`z Su,zƟ'?`SAR'QOBڟy Xː'lUn-P?+@g\g9g" SB&ˀFR=9!N_~1%Ĵ~! qߔ>@e-߻Y/Wt#46SaMUPWw!Eg WU"TZT|>plYқQ,str̊e7ܘmUHz%dON@2!>*tHQdާj9+TΕ1CCFP ƃ9D[kzN>,u3PKWǼ>@ĎBH]2xL1nisNmzrV%&6~Fnj6QfAw [$1#$V5wO]$&oFDev2W#)viJ'; چΕ ڔmujqv?Vl6QBII ybSN /|ˇLeSA^-w4w% F%Otvqsdۓ&#Ja_YU'g>3'_ K?oLY5O7v 6'|''I>_Vq3giɜvk_p`A*)z#BC4ԾR:(.=L K1}horңnME8c=;@`3w7gQ@^ZO!ХUɭg.oC`*lIt(1}-:΅ maߺߟsx/Xuwt;j XD^_; Rk!=R?XlYV:|7=Z1B0p-2*N68 ky3h &=Ğ~)J1H;f&|I)g'u#z#kA8|$p8+pIjS;}ÊG6\"9~X h'-WoL(ɎA«7ݎnRB]LRv.udz:Sѿ)I_q^}"l\>h+ބLcp v|PZ_5CP.&Zi6%'@I#m/i;4H-p "&4QsIoe-[p*jF&h@-_F^0t/;CY8{7; K嘾P,-4 jN5BO^CrkZ}c'ݳq?"Q7H:U~z}.R,NB![PcuOUZ] $kXl5aKM\<ޮ.[Rq͎H507wݙջ~'6o'0[qXsqH"`BDo=;2u,&S$yvD"`GzڙEG7=yyۍᲾ ʗ8Ej hKIYl"Ne9q/ʞjݒ5JV%W7VT,8PzlÊ$C;t-#% ~}ʖ_- d${N\H :=Wm8?H\ 680{ ,^_akxۄ_h uͺsTyXaOޔNǔni߷Oať3hi̠s=C(T Dw[IW?H߼:Xa&j4tnS{>SvJ-p/.M+a0hO0+O.?( `1Ti+Ic: ŝ]ZrCS@tLgYWr|hΗMl&6k_ ZWhF_"9)ƵդӇ0KI9!QnA* Hbq0MPLT";zxN[}e'WʴPeRA~R>z~OWC-V@D &mObe&O_˔zF2RCHPr."-7v]C!B-S}P-+!S œ&}4qxmΚ׍&-$;[ZC0PH8ƈ/+oզL᠓ĉ: ^eWmL\^/Y֤As}gL +x$1DslB Y8 aGyt|O[qB /W۶mBTe\ljA^aKWYh!lBzW`/#(k%K\pNy[bDZW,R.'$}MF/]"ڜ:`Ū!ZKO!TݫZMWETϫ2G'tM(NU2$rRV^ևltݎ G~nA7/^sw Y\汞_[9ݤ\f9|Y^j#尽 [?CAr:bّ{:S?tV&:wdiP*f6JSS.$3Du## Pw(c>y?PRfV^N87󷐙#)Z+HBYY.o:Qu;L -Qrpȓ^5_ngir`Of+C҉['y;jCal !vR,8WyU֯oc_渦WXw ~ wI#'R(ߴʙ2+uFBMi|hy&PY`F@*.4s&ëq:jiymul&?qf j?uɔa:KG.]:OvO[q)U  [ԓ5㤤x:[R;$ta*UX|W4MIE]!Q(?G]z~J:ѥdwpȊ R 8zN z7Bkʎ?e_L)aKAYW*O"[A<ɁFRrblk,$lQ~rYV&2<*![2OUQ|=sCҡ0*0Anɘ=sdc `f%G6O;`yKodXQmBsv#ϠaW_3,N7c&IJr'6U+ 'E+¢4K4JA_D.%(aGf~B]qk8zha>38ӿ}ver^zDԔpȱ8Q'muO!wVjo{>mceD x%d؝ yf(+^m;] 9E5R Ca4ٝͱcby6Di૱J]RK{UgMW,cA\%. I-L9M)4 ySFOqYV^ e(05l:(l::r@hx28_'syvʾ [dOhd?+5Z6$ &p{4oaj=n*L?鯤^'|s~K) n*1UaIoca"qQ6nH~HGDϊrnIQG5b#Q@ˁFRv5K A@k.uZew^B$Tax@~M! 2V<SF+ -f~ X#J\ Ç읊 & &\GdOZÕGCAOl %뛪m-8. vaO@YO]OTk^}:H|%D DnR"8c.LgHvb8CBXP0 +A\s uU&EqL!4HMF}&=[g\10D8 /S֦T57_%6qOHU`PNL3<*'fIr:"2~pOejAvn?|~\˭H?U#r#$^\LX閭ǹԩ 0 84[Ukی叜bG"aKDbD?JSJNfU6SvYE6f77Wim/?ŌONo;|MgKs!Xd< H;Y%`?*'(o Fp8sp6rf;ji:sM QR0@0SceHm GeBh¹w%8>&!_Daц z+_L,ķhK(LU[ 8|9Y1pE$/87xB+ٹ(A}Lg/AE&a%IN5TС*-OɃdO~ ?Xj.QYqڨ`|M9^cťf`,'dh[YYNɐ.\bO=@(.!NGU 1ԆY0kވ Nnhjn Q,e<4qG!"rm i!3DZ\Hnr\~Ѽ{3̐tzt[?éGLE"$n8K:10TyF;6{u(yRE*J0EjU8pp褮c&[4w㸪+|UJDtJ?JhlAb:A3y#wGqZ]-A4g:c(&, 㞇Bʅg^YJz9m,DJ7țӪ\Xq}rc&%.'l֓%D&n8clE@Zq$+#FQPIp.5yI,Wn'ܽ>@롧Ӡ?|&3mI&Y҃ @dbFUn+ 2ƄZxi=^amVB7/TʢQł73Ƃ[`\>v~Kh^&缕up8H?eB6<;^ Ή:sAJ;eb^Ž*A8Gmc$ǻ{]Yv E;q0Tn3@/@M!DmI+J])aaTDg6QcEa4)T8jVeosԺf7L2nc.Q!1|y#|=Q?oh}E )5Oy2nꄦ_DmPJp;+F1"[gFx XMavnO ?jbj>i,,10Y ꕃ{Cjjc~p4J+o&>s=PqsҼijV4jgQ hgpV7N cgͲ_bnߠ4]h>M|ŋ5ݎPԥ&ًDY^\/fm)iSXޝ^KV1ǁC=C߱[ 0?U7xJc KP[\{&rӴrG/$ a WZ"Hkԟ8V{[5*rƮwي]nkyv$껡M/xK^ŦLgtݶSslD!SPUz߁ak DFe®[۬~|>)]7\ݩ GtQvU/ 6䐓_\Eؼ4zʃN ?ǯ#Z\ -^Feuרk,cɴ>A jz _ ^\r"v,Ɵ8Ғ5}qPa:6-"Poq5h78\/_~ 55v_Lo;a$ʦj8OsQΌ M6e⥇:xoU~.k^Ch5eYOzf_>Zj&7^ݖJ{ﰁG;}_y^GvXsDŽulTX@3(\ Mbߤ4Ag7k|:fi?7 a-tRsyHr…=Țdet|gIGA=hK,%}"Ҙ[:B+Jj;6^G!W@kV̈9MIF;{2P韕ORPs}lnj2甍MTؒ7=XrW׸!ϳT:ִc2᧺(عc`"%+$揄{we_SbLK@gG2RFU K̳ !v2T'|d2{ ǘLdj㳱;Co4iIx QCH։ԕSuG]{8љ$U-ųY\c|ڇY "強 0ZK^gHo  +AlچޫPRf 3c9#~D`T~ޑ WӷV%$@otT;j@5%+3 Oâ~6.)|cisF~G6Xe>c+c((%#ohQpѶhm :a')@q#']}[\CҐ\Ctg6X@HE*D5YK4~ 1U<M__z`ipgB v$Д0J{M=Wn57ZȰe/0IſY[|z ZL1Oyr^Y"$1ޥ2M9Q=c{h_OJ%HFn7E$Ӽŭ'!XMωV@J*B_|8qbF_%SSj [V"}[Pb^9ǷVp4(Xy)p5+S [,LXdNoNsT?_ -Y{6=Y%QkU1:؈/L6:,'+^drqP_$7#6؍UׄLXeo;,n r*0R"wZ,Q3Ut|CSY :ECIٮ5+[jL@?#]܅$NP5+Om F + C($?Brh qїM}6ϲoGּ;P^!H dVkcsH"{3A]3h`3m+\}yix%{^=Hx#J1 ]ٶ6B‘JZZxFEg a9_h!;(\Ҷadnac\Y# U^ h|e;׍"RWiZe^ %H+ sݖ\vхAU!r[uG#evMV44NgZ(6g$Tc;;qzX>!Sl*Ԁt+c7wf8tq.7|餍.XsW6uQIe㰹~hͬu-q VcvA!$LczzZ`ؾZIwcZ/`1q,ľYN>jK=0̅D1(Ӫ>ój{ϞΪӋ&R:Ɓ! .f|iv"O֌U.O5*d·K!2$LsJu ̷oƔj)Yy*xWA^ hЍA4L:ӫn1WjЌOݻi |DbS5`WRө?{"kP}bz#(ɮ`+=USfiPZm/!/%TZiL- p 1 3ic0&uBOuI|8 ?(*RE aT̺j?p_ Ғ|Z|Q6j~M`73%9D,}јPW|@M,~=ӮCy) v&m(ɰ[(?i4zZaoY#VQD8A$RM! ǙMBW'9 lgkW=giI[d9_qZ` MLT)*1#74|m 9leR}8wG(E/ @-,IL X*8eˋ6 !]yU"`; oڥx!p6: c<q%  r%miΧTxG]zߗ1YE(FrR 4 {[r/?$kXD>v-I՚ /+ RksQ+.:?Db/ZHSېY0 t)^A>ONoT3" G6FG<~lY Q~T4~b_V_jلQ^J]&21R}w{oLϙ6rhlEG˸ceV|}2|M8[Z T x"y;rsސOŶ|&KQ!+91$F -0X{5bӇuv7R$!Odld|2&uV<|WI}>ܹk-Vs37nxNχI\NQu'HAߦfdt3yQX#C}g֊i+ji뉑IcLd͂Hd/@_JGDNw"; MYp`~ v0'v~mtAe`(KQ7(G+v%FR.D`{PP0Ǭ0$LmNz5ȭOCŬ%9MR[(IB=3DNfkϫ) 8u-U#?n qWkƮ@Iݤyh;hL:\eYi[ A~9 s]e9/ |锋Uk8 37l54QbSz0=^;'D;!L;):ٜwU:c: wY6yaꙞ|oA!7D!{!/E+A M0C|?IQˣ{k:(eTJ?65Ȃ MͻƉuY ةp4]\|9`L  vh5g M^-sSC'7L;Dзk3 ]ѴԻ-lѬF}/aAgk,$g:_8&!6_{<Yy;w@dWeDѯD*AE^u `Hy>ηjv b^2NO9+Bnޯlk/+ %9T)':woQ$e`{97pq6U7oy6OA6 ؕ[Ζ'M1PGHکD1;0Msx$yM lJ+˦AT ű&T}yQf :=J?C$͞Mt[oN8yDp\q">a ]rR7K/nV&ȔXI'\@UH9iA_[!M'l4/9c Awb ؗ%M: ]6tq >:lӚUٲZ vZRj'\K މkN|C\OMuLȦ-&X5UIK޵~출%ML@gxǝC?\Q="@<#IaA?tND@0'Ķ4ge7O0FB|+~>*c( 9'=PZ `G&BN$&t `Y&hf`ϰJ!-Aw0燝ڈ/e~|{1dc .Ro$s:-?$t6;*\[oMOk9GE3x>R v>PqP.XahݩF?<#fϤOt A1^JΠYI;O]DPX+p!:!]) UyYGwƶCHk{~38rb1nrxHYX6sU]HhAF2ml ,jCXt t :uF 1DklfcyWyvpzVks6[z5OKR :'sTdSS((*-lR$JiFu: k`.w ,qq[aK@&2Zl;*vΰ\@_J*WO962t* N I%MuK ̛#9yqsJܕgWImke## ߖD3bG$RLa#tksHw20!}ˬ9źRSQN+[P pV0HQʎu-{Q(]]Cx<0,$ r'4xOB!ɘ r.U; y3JPfWF"dSNGM]fg{?TF۲Q>y+F2/$k$: )C*EZ äeRޗ[;qe&YʕdfH^\=`>) -y"U.)f/W2}N)/ȐRO%/\JИ}v{|_ƥBû?73v qMVYߛk8uل` Kho_4SτXx-B̝6.C`5 s8 zD9ӓ))[ބ|MH}-.hĈ oڜ5D?:rbnE<8f3шUP}Hr#OI?sj/o N%qhy`q W.֬AU8;rLz>>gE/Ė FJTc }CP&SA q5Aa OC![-WUjq+eX0p.I'CGH(vyF@)$dڽ:Fۍd qKcьo&o Tr)U0)tZdg(;>Y}7g)!w)EhqJ8$ȈB] ʹ-K2u8y_Ig4#4"ߐ}"qEU L/L6) .sYbAnw*l`$s›*ѧz{3=/C̸{'s0"h'J}WaWR3kj:IrtM,Ntb횘 8ȭ4H; \aNEMγ$;ArWZY;@PvlX}#"k9)]%>26Yh 9vV(AI)xޜy[f ]+M$\`=mȖS֛vL: 3}5ꌯ"kD_g8vM44Ls^!>Na:]j3]1܎\.[Ƀ*e=akS >8{VNorE<a5D K3]Ɂ\hVsI8j)+ݨ߉1Ha^ Ir_ \ͨ6fؒp!6q l6C#0_[a,LN]|bxiJg $5PCrw6o-˖[-uUxnXB+§b#L:ش? +hUJ*Ht="k`'Qd#Č ~Pud}9牏~ <l諵EN9SIU*9@mjs7!/Ub)6睱nP0{7ZP$M~OJ(ۊa_t#j@@:V*F,6p2K|LHa>ٕa] (L􌫱cv mN!S߳#c 5֌Sp]cd^1HSa=E!@:9Vdr" Zhj1Xdva9MfؠEW:gjQ* H'+-[:3npjU&'օi'PB~ 'OddMYcU4a}aO+`n^o ,CM*ŵq(yca!!EU GBYj&UgL!VDO1(\4"VOV삍v$yyhowꐪn/|<;#V!mG`}$~&8tsq'@%qi[}gLzKl ˾3D7oܭQSvEM|d߯7J.F{9!(hWA 6Cm8)@c9*'XrԭvG l F4w-%J?jfH&#{ؤ%\ >%&Sf g 2 sQlCT+о+/´`>2ӛP+W!t|{3k-TsiVƲE(O/-jX]S97|W޿zpA;5rL|eS{Se5;s2(nͬ Go ~!z/xL,Vt|d ]4nqJkz.mdkWvS8G?^PX~׉=kR8d7 _ ;O1ԄWϒC3 kGhO) sZN/N UMf w&B>1ف8Sd=˞ = dHiOW 9<su,<qU:iG>fTݙL$R/V*yi>`1_95RN< ,w-02ef69`I/%y*+TS0VSؖB> HCm9$ߧ(ߖ)~xK~~[W+F!H*iYuKjm|Ѕie[VKTwPNM֔Smu>1*WCˁR6Ev,HBaqto١~6=}''*(yiWP{m]bBQjgHSw 92NhUq.(ܫ$,ߴtX<@4FoB&qmA6Ӊ  Y3xot,efUILV͊O2EhdJ| t?5jy>({ro4AFl'l+U`~ݴ56%a%VBJg5ǖ1v՚@ iA,%|0- q⌱bչ]fI~_H-3iH2ju#O:Z"r~`uΫDhoBh~B[H.ɔdxY @y,gRd N]\)m]Bo!'Pⲛ.Dpr5/3nۀA1&+g\NF ^NTzq!Pː}]wCA^ɜ߫eC>  yq䇑,db@ 7>;{A($P;J z?xhd@q|ٕήGi"X"BVssS^d^+OyvQD<* [s-^LJ;M 3)vvܑ Mh7+r.4C?: [͏W/޽lee`ӌIqBÄm<{W&6g ;xS5Ʉ.L=Zz]t]5zDNfdVj>kq_{[iD l57SqMXCJنy5n›o&|>mgI)w"cུc5tˬ!(^=uL,哰N |T)bC\XB-.}\Ll&+3ue4OY,9ٽǣ6nf`*ުf2+%'.X>¬C&1QZR 5FaF?Or>$? GDx *F5㖔E R}je/ 2|n;-N4{e׏a$i'mxY߻!ʵ^em 3 eY2sB 둢/V`JwC$Pof %Y Í!b (DWN߾M_GӭNK+piEyoK#ydK" b-@ͺ*zA@B,Ws}Yٺ\:gӠR!O9e_\)}Rf' ژrO;4r V/#^_q'@Lv\|`o!ȧ7ڦFSex\B"8Cf=~-}Z&B=t*{EH Zޙ ;c /@Rs:wHܳcv?/*^kbwY+k~N 6MU--i,2|$ppW9 ?^A]޸_Ae+l]vfVBV}mx0}~z0׳7gi.Ly[pSio`Q0p_:;墘7S~kR9pE 'cq (}Vw6қVJ@*Ta֩СfU?OȐj}Qqrv=C$V^lᾓjRC$_};:ŒWSƘ$4Ƹ?'Y0h|B2.-To»v#&/JѰ|pi LJ^hÙr$y;kH+Jwi/?=Q'`s] R* tv*f?o6g;3VY<:0³NXF((tQtDIv?P?'g3v @5b'~&:]\tr}0Ĩ8OR~] TRzrz1),lG,Z g d54AoQ}z;a'Gk60] 1]5׺ǙUYt}~n3r'<9KXgZⳌuH^M¥ j+m20e`S`𣍍|t rB2NTR'HW0[ܮӓ+8{$>:P#k 4h<9΂ t :3C3FIh~"#6bM YT}y!GVn8&W ]9$-.ibRE`XqW588W ±sn==XJI;|&_GUdt'/^Q8*HTvD)M < Fn- L?<%?%x68>~**DS5vP=4a.wXdt3 *b%=M꣛a5ễ"A?ͥ]Zo9h<]U$pZXSxrkP.h#4I jQ7n-7†>jVS°r +:EvI 0j}n&2 på75SMg9ŰQW!e2CCi#mœ-D.QE˧u 20.P`#J1?j,ID5jxdH XQĐk/5LzsQ0XQ̗[(]o,kI V:+MoBB~/`8-᜽uL)}{i'%x ֝h6=+ Zv6nͳxW՟4&vp"LSfJiFxJk3 j߹4X,$lEQW McusA6c }o'Xyc.)VKJ $JH6Mj;C OR_ D-Ղ"s%B֝؝F 1,x[b W_Jܺ>ms.-gAz_/ŕzBv.Wm(_e@&a^: }l`#38q|̶o"Jxt}64y+EU;;Vɕ>Ϣǭn97UU>y%iFsbM;x~^njWR3߼р3EX>b+RYaUˮFqxU/^N !Cڇ)Cْlk7 aOW'$^Ȯ UGqcA[3br +rmX.>>7[%%TńS<-mq†zNōƝ<*!r@!1Q4v"Ѥi0KL3:;'^ư)NK Kmtd: P 0kܷ&2? 작uH&D:J^bڸ9_$*3 s#]K{>'@[lP2Kt͸ߦfA lYq/$6zԩL"FH|hX]E'YwSLzJU a,+U @̿ G-sb<*yHnlpLq@8 qӜ̫ ݅= dCG{m|BldFq C> GD6+>3Jldg|vk]^cE[j I.Me1E ja:vHԲݒ p[F??Ř|>Q7vyAee6laOLBF%mjĝy`%LJA4r2&Kai97 0 'VBtIJb t[xtvF{ -a,>Ep>G?eNWEbo=OgLؔWgأof0IZ}}4E$K9i(G|P'`X^cA:Uj{qk.kOyB%,MTWz!1zvMF^.nd@bJO(`Nh 2OJ>,gXY8Cdk0qؔWd;Ge7 VS?&NvAOi~WwgU%+0`RI?l n@F}5Ge'Xjm `^#qƯĪ[볫}tqk yT˗F> a[_lΌx>X Yk[XH)4'+Y-/mBǔIF­8iVȠMXA MCQcG($(U gj?#آg\, G-r 6˱\wC|fC| `b֊hZ-ʬɎ.$ÑUҸA,~:`>@L~B6KNfsL38 ] Bb#~m9 6 r. O2ka۟rËTBM <Oe}{.t9S5?#Mo̵Z"[E,ɡV#* n{RBd8k-W`Rg;?y~ŝ(r\MxCܖ:zl&H~(ڶhCATw%(FE gm2 4%=~{~ɷ_HgLRB_>R\@6 Nq?RgDd!{q,tnǬ)AQuofhAPZ/en-h(_A(^kre$0FBAhÛ"V& r lMe7 śIk])MD[XBr_!l&QU8(,R8Ju~S#ACv~Yѥ!"5Ut= -08JiuTΑ džnxu@磱D%/o\} wTn,Wbjv++˚ ]KE06Q7 -ƋDXؗzxf|['[8j9Ѐ wJ\Ò k-ݿbxzjp"{ȕ:Ö >pUJ)[W3?ޮDӥ"8'OAQʪܑ&M>Ӂ?*fWgӻ8EXRK+D'M6aYv`(G6ܯA!> :%+eA1灶 !F@oJ+\S^\{$!j PÃ"A8ΤrOp 'dC_?hd auT1$˒G{{#<+pm;CZdԫO{: FyM-OTւbJ(Ƿ@Ƀ^/?yM>?$ѤHĔ+)aͱF r8øÝ =7U7cQ?7;%RG[3e`u6`)ڝ[j{I*/ƪ9q2@ M4i8pY(+Etɩx; p9T&:|JI=CBӃ8Qm ^)/i@Adkc68M2WE]?WPQqbk55lÉPL%f, tZR3TƪR3RQ|P]\aAPG,Xv]7wƠs)OX^I!kgu6{ԲH81MFwoH1= -dZq1oÒ<`nNípjS6ӛ<:F^|iEhQw6C/^Ybh؀".R`AV6H70U mK{yV"s~K@LtH*[5gAL@fqx8|ᇞrG [M@؉K8}C-0c󙱶áˤw%O@qOPP".38ZZ S8j+SXw@m*AԢ>Z>Zxrfр2FCcV?aߟyOE3`L Df׫,j9hC' KFYiMX9{a$-"X( `L0i[ _&H"A&VdA-R &,4Q]i^SN~sl!S$ξá{o2M_Z'wEߖY!.b(?[E~BT*qZv|9q9XcKЍޣFt2*t#MNLegkYoNQTi)su5p,Q>8sCߠI5BW H3Ak.ɾf +ׯ^Zecv^َhe1^}Q>5k+i)U?= ۤ>gkΩ;ʖ\i#+g Cʎw&`襧ķR4 UZ'~R]9a^aռذ}R 5+fKۦP6W+UU -USEle Q+Ftz00zB[ D- [o Хٷ{k'wر}ߢV50[b6L+L BRV|7N6=fVCt P`ʱ%)k0wQ8YM%:.99g`@5b gԽkcJ8I[0U*s3K2(1ٟ8Ҫh6PiUKoÞ_2ձVMH3¾Um"2$HT>H2xs0A>/Qq7"WUߌ7C#3~WoF7xQ[+N@UP ~^kGq7E93kH(p] za\e+ 8vP3OtX)jr[0Up3ѓ Z(wdLЌi[;<*7j1on t,B%fYZ*cʼnFxK֊ kr/Kz*wtZ DC<&8T2y fc!F.!ZSG@/ V,ޚ\R P7nv ֏tcS]WǚʏӐއoM'$D|ʸC,5$TׂS1=A1NKهVKT\< bF^@kG(9Cb7A%HNVqZ7 iVOBzaUȚHلE;pגӀcZ%/xZVO`8 :Zj;Fm jC}xR9vFy0QvB1p٘*`Nm1XԈ&v5 K bF_3£$rrHMݵ e+(ρ# ͞K6O(~(ppr bf.)13"TPV?vsFw͐% ;o4e8tqca䏩H,W V'mKvHcHȘO1z͕],m#K''P(J֌RWFN:05\2&D!yDEx78=<80SREL Zb{9?! i9ޘzcѷJ!;'ơ hv}NS${61__@kdl9m-b@hIMgs UihNj]컇*1*NGE@#ц Z-*Sr,Vf@R){r$kSzBĠ8Kn$dj&̈DlwF }3N>㬡/K #cI^ۂ?*w FEۄ=~d%*0OyB4! w%XW ^lC9ģ~mm= .͹6w`,o/O'Ӷ 3ptC֯diߕUo["I$|`ڗj8Z[ ̄(^&9fٯ4z SUr\j}C2i+bc;*q&7t\,A |p>S>F/^=ku ŏh%w4oTy1qtXHa!? /Xtֈn~Ѵ5~-Wg uIS܇P1a=ALofs;qw4箴=mp.P6RiNUހdS!-z_A:(y5 l3bOdKf+V&wQG u)b< RQ4BنQ̬*.XQz-t-YigZ&7S3 ҹ,Qp.Hh%m9lI D+}_H.ra|Qv)q?lŕ;~60G;NC6[OVbGM8 Sx,$ ۺH몌 xٿs Q6SjyĽ2&?x[Md<@H@X$8pw: ~=$sUinRg{:i5rSV%£g`f$-5Z @azEH즏z)r|-gN%5 WI'Pcq`uqI`Ea8 N2 WУ 'K pҼE OK@cG+5w,|^EByA=ז2n@mE H15&-?vbV.@9UX6$EV9x`\fΦ*0̳pqSqKK9 p1qZv.uVTy:R7nR<=l1-(uGeU? FFXIN^8U-@edWR]"."PYUdЏ$7&݅@5}%PWp E sZZԏll.~%n?ve5zTi6h1hU9Z>eONi}&>5L|Ꙙngd˩<a02h62ߏ.etoi tIS |&+ +FU3-9Bl~xy.D 2{/,t/{@koqU}&0TEx) ɲ_3ͻ 7ETf-yK?+9`6WSNgks4}x[wr &pMC ehqXsw%:1/`LvFiV1Y".-V6gof.->@G2#ppDW\,ﵳBIꐝ"?Tg>Vѣ(pgQ촍uy$I st`0R[&W0b!>:I!,@|;lT GCahOۊ\=嵱mF>aiLT34k{JQXH==:#ѕo[BOӥbwnIT~p\SUe@|`Wlr狊[,.XOoelŢ:.TT`OTDIjfrbݫH^Y '3 p4ؗ:Ob G5Pd7~u60eԧuN7,b";Y-(d ZIw)[Ƀ+hNhI)O߳)MSQngTgL.i2DW@4At䔼nWϋ1+U|u8 WS_鞿; Z+3+̬EZT"@ɕRFz7A X>^F }г"p7mI SsCIe^p$ܺf8 ?As5A4/mǨm춁Nd>I@όj3_, S(Lϲ+ӕ*_n3=!J*҂Jhpȟ;zǂ p׷2( O";:{fԈˢ`C^" w< uŠ4 /u=Zl\ګ٫ %*|7JvT?e2=)8jDK\W3 _'b̸O4сfqODQu+tb`}>@R+S9u]W<ig('u\a֗>YÐ%(q(svλpb z`"H0m n%+)rs]A{ub?L{ ix"jȬ|TzTžB)<jኲN!SU0aACМZ|V9?.>CQ\)e/tk3A'N bf(M֔|q4=p1=ڻ(JC Mr֓#4o V 퀕ԡ@\%-Yg8GJ?)Xe^sEE7N6E>j`cz(Z'6vؚ gXs (tS ],,L8zOG?(QM}?)UJgQEE!B@ cM!A 78T#TK>Wrǩq6-gNZ{ ϏuPS5κN^m 5SwJID3̝j &5@!+7}ìAzvN#bqF}yyڊ/J ,mGeP#U |\6{~ +)ĸ]A.{b$8GHXA`K$P%SfN/z{#ge7Kz-Y\3YHxR/sc6&`hiNYЮ:wiR*t}GcDci)es ;P\A\[ X1LB:^ פQ6au2%rIi,Sۃ[(ǥE^X7PC _\Z35#$.Mks/oDZ _on#Z\5Ҍ[6BbJ>U k$ \h^ C=]m[家8;%Q)tdh$$c!duJz5nd\#wcfFTivgQ>\`2M o/%SJ8`ⵯD2XjSN<.5| H?ð=넘FtȆp";L2ͣ>dBӎ ҎIE HLfxc'Szցs xg;/z9 0);|~mߊKE' x_qJܦq*MjR2!&;Fml 6.= 0D)ttObR8߭&!nx<8#ms#WQzkÏ"_볊pP:о{~Q3e^A) |Ӭ;OV@n%+‹J ?@ }4'b(]ELB ݐZq;hvtgf9~H^@br27f]IBI3SjXP?WxWAiM$&~'kޑ5׿3\ ?\1)H{V(T,̺ڱmLR^o%-xvƯx ӺuH%w0g17| Z1Y^#lRv[TPhb3Tar$Zg}^`}ʃFd{ Ɖa)m0txȦ 0ZE=OSRi<סw&ELtlEu*GAc/ОkO: TC6Q#p!Zkk m'䎬,WN|2Ў9KKe?|loDRJ~DN> EclHT>\Y5ń znnB!X=rʑ)/I#@1a(fAף0TІ8^C =CW`4Y@(Wb'ppzFq35&5t&Bm0~PL w:"9傯u=ADŽGʙ^[^ ԃVl%3x|$fKG:$|U_^fmd1dpj9И')Z㭓ĦcCy=3c9̃..|jN PLVh?8wsbLWL& *CT dZCRE4p^&puTɯD"Ћ)c6?'~cq(vYNi4i {Fה5'9T B:xO VoEY?WA\oYa [,ˆD7dȰkgI`#=-6cшMJ6O1j>P/˸11}Q"lB,D^Jtߘ(:c\,&Kybsj ũii$˗1Do( Wa$ aLN/htZ4Zp?à(/4{+ ^" 凧D]50TEzܮMAІ;c dlJo͵;nmD!z3j{ WvimYtQ59}<|Z8'(SZy \PTKlC_IcIо=)&y›e{dD$f$^SIDCdT)]+h!-/An _:H1VHk&OG Yh7~jQ3@3B 9{<=۷ );Uxd E>.m+9s$QԌ'ꟍ\7uںG0y=#36oOVa ӧ=0S5J =DKh"O؞,]@pg6BgwMD).lJ巘vffj L^^I@waOf$& N@lFh-?M\B'|@IWzBxվ٩+pRӪln M,+{ʈڌo]5ɪgffSQ}BTɿʑg4M0(iՐJ5l|q'eM <ެҟD4K5QI,G˭'~mXu@xZf;/`#܉&,/ gg.2[(@OPn *a}қX mT4Y@syts9<2gI_6$B%h}0e皒Xrہ]ld6Jm6H zJ*oflfr-X͡ޣaNb~/J=G&>8\2ԋ$04ժRYbx= ߄ekvƈњ3s8j5ꖡA>1{6{ G\uxf|NǗ߉VU0h,KBG .:ОRW͢B!DEV=W/gr߲W=1m#ШY_nUƲM.\,Y3E[oq SpA\XQ;Yjr- U#؅>v0IR4A_"~U3VsE!RC=y&zvwkʴ|VC6v'.1C̱k&3CHɯP9`AKLAFҲo<")"#paFNbq>$-~pbKϪR;.Ώ 3 Q ћu!6fbنRNJI| YB:׼}PՊ+X6 cN3pڋw 'v[df%ƁJDNzΠ1e}9O{ӌ_Bζ}9);$R}n %]ey;]Ʀl,jC{fr[ګ(wQ{B/T>J/L?hٌ]2J ?|uh627uUcqeh1F2ŕMVt 0z—JυJW}H  ˭'& -7qw"WQ#Z,],w㩬~gnˋRKGMg%7]$rb%hj$ALeְll ߟӅ$>Mԭ$H,3kμ葡Nni }z2ш'J)׋uc'!BwS`x-9L4'C^q-=ȎU&a~MawgsCZw!ߏGK kCa,QsѲZbn'rH@Kkؑ0xRYe3S(m0u `e} nSKA0)1!}I/}qpsl`!OY5]V_dbٓyE'Jn mFeƉ[a'ؑċ)51^J }VDu{l8zM`MjQm7  ̅p@q/IM7|6N+Vn=[MQ$]S$>et iv9̫2wIRԅ0(ӵ˦yG?%FLVNGm8~+t2?ϓx-G9+ڈi\=hgڤ~p5 $.)-Negs`OS@SΌW#-s?;WIma _Y'j+슠 8Ur􁼆s?3ձq8\сFR8T1>Э^4c$2Eo4MVEQln  W(A9=J@B=qA=.(:o,REWac )csRkd&  @̲]U=&k@F4#ß=P*@LJIҁ)s~&@ui81}iR4]ǜݹU ȡ7B< 򹻇,r5T..}:^~+!{2QDG5?*7@]ǟ Љ$u.kNHupS|7N/=q4_6.ߚ;v{DeQ w'❄%Խ ͒B3eo7ё ƀYZ*k4cp%*◅8Qʼ^%iYj*krKfTTEr7W{Ky;5lّ ՟?ȏFZaJpè1tpЅfp8kFeLqPޘ-'OPie( ր]i1`HϾEHZ'=_Q"Ev~j7(n'ؚU₊n13_HOɑ Ϊ .NH霟h_‘ CdO)ھg h_o,V(Dz97]<4xj+r v=DG*~mS(19x-hZ9i\XMo߫gɏ@Khhch0JEl-Wub) =YڇLBC܌ׁOu#HGk{*ɩZXi_\iN+T}ʰNߤA2 q>Ƣg#=]G).{ ~#]H҂K$N vȨi &j j!ƙlV T# Hm )ePvpL$D6S fvvy" vWm0Z#3s24pjLfnR >&dB(nR%"&G)>' _0n%sl!hU32 gJ :@G5\6V]fxkXF|q5W]J$(uIk2+2A+Y|xj"<,@"F;}Fh-nbe+syh(m$i:šQѳ3I?4ex_,I& 񑼌$E 3Uh-!YhC)c+UU4^r%Es-(MІ ˭ ;t ˳RDP NRL[7/TGJ3ec!(ց(}"Fښ/z)ȝ"qLrk*B + .u+?:B:%зϋ4%a1{|isFHHb_\ DMNjMTg4_a;܂B $)$[<`r]'AeצAZb%ֽkH㫭T@㡾Nw{D5ힺ3ϵ{sN뎀1*3``;eE_O2In\x?:Һ\$@)P%EܵS#C Xdj UZu9ŷp6_u^RCo#ZAe U=!}I儌`E+c'@߻]œf@01dE|H,PZذ8F7?|qecJZ^Wn^g%e,e. ,7O"U>J>G7xC?^xr0=gI֭q!+}NLd%}v!A^q9+UEYE}xc |0 ֟ p5VB ѹ}Rǹ EY$$N5I+|Ӑn KѫDOk5|c8|sHH/!_pErQ,wB`]GEK%ͤ2(9SlfϖE{o<o7!l=yl}53"ſz[(,X!0'_{P3 V,WN<+jsJpZ|iڥM̩>QB $^Q)!D(TT*#X`Phr+r?EИi DVqکQl [[C~Q:gm@oyf4~yvuNY֡ұ0I-SlePfEӢJnzPdDE]OC{.c>`7G'@Y;w+!NVd6 @&8Wju~mԭ'ZgkK#Za ?DH:yIvր)#x/Cy ROy|f|}6$3Ӟ07,$EBp'-*fޥrؾTLlt,aZ0>#C&ݶZSA0.㡕?FT#*6 `vpgJ[*l6pI*%od j11Q6Sps1SA&Y_cT^rn_kG`esJRQ[LpRz۔!L|Z<&-$KȝEGY 9GѠ#&}-k'_ בJ)2EőT遷CO-Q뙵` 4[uɊ޳cke"GEAD4_#hOOeN|;y) xO5yJ3|(κ6PAr) b2c%D8_c h<mS}!}0.8$'H.i7-mD?%W9WbFۊPՙeW k~_Fo. i""W7;SVߐ RC\6At V@ R_)礀y W0:<8dFMv"#QX&gg {>T 38eӝY Ki3_U>U`((8Ni|mIt͜m.K*eL2dӯajhra~ _Qq[eY{]A>2R'j#㞧WEzımd;QU1#?e\Xl/0J>KsXlA6I?ݣE|l9BeFւs8ʼnyzw>'QI&[ sQ^~4 r=%)ڛwC w_V .ruQE#P_-lux>rkbtI˙@~VՂ$U$?A7H"@o;\b1'L3%k2 ,s J)=nhl?oM`s.|ax~ٕdOs GjI'-}T($UYP& p[kd `gD޽9 cvNCt9]VͪQVN+oaaʨV[ֳSj"0_}!@]dmc,TfŰ=8e@r>^]Ÿ:o0Rk_i&WeZ|:fލ?QQ:v($1cÃw'N薕 !OTOP7eSjZP}Ojj1 ҕ 4o.I"v!]/֌K!})v-צW4h tcФ8w/# `Nwf.v&k ao[cF&۵Z775pTj3- <Cĭ_0M8"7u0sh8Ov5u̾{1C7aK%?Hӂ| % hk7Z<++ !&m䄒{)_w26Re),򋣥s650#WCϴgEj^uvq=?b.?=Xhju.O*k HIX"J.Y JOhAp kaSmZ6>/_Ч&0k5'NdaP-9ZIWt3r\1i~cB[X=dMJ\WcI<,/U&\2×{*/XF$zXZG:bm/c-XHx-;nT$Р̇c-`($${\ c2ܓ4QXGCMeį7h)&DA;}5?M Դɼ7چ޷pH$#P/;G g,2ҥi}XI!0ùaLNY3+8/-At`{W|Gey[EсO3O8x+ޞ21O1hfk73(Vg@{_4tAe ݮVyT jo@ 0.BI0kݧ{宣LaE o/֡H)׍;蕒'0,~Z02 6u:6|qE'+4_*VdF,t\2@hHC3DC?k4B 1߬#  ׄ1VQQCw(|n¯ٝρ&i cF\X3uBQw˃,\D zQcaWk.$L## UevNq؀իi%/;u$1xAHyVJ5aU!y*Qz ՒbT=FLm V 8;1yDpdi M5W:P#}<&#RMx]QJGx$f ?6ݎɌw\4f`y.#c<?b@*Ǔ0!?L7U yE*D5nރK8YN(a>_XU^N%avr^JQCAp%d͍D{{eU"(Ʈ Ȟr;ݳԹk9?J)zw^> fl9zdꡔ9 +⠤P/jp{La w*~-OsvwtJfu\~tc4!\JHp 8GيL`gɹ'MJϾzJɣ:B3:MbؚNF*@}.0jҏ4ƴ'UC?Ww}XǮ" Ft9WvnP09)+TşSxڲi+ yw"?n j퐤6p2gpy#=X*=-k׶1)+J #p>\5\Mn䃀 4M&6 5<0W׮JNsC}vKE.pF+<떌kU9a2bɶnwlE yL59Aiffn`n Ԙ@XpOʶ:J[PDDib co1lSPyC( ć2@y:QRH{G;ţ:xPc%1?B56]yב׎JQ4%Ύ26?E.-J.`Ĉ[xx j|@Dvq'ԍo=KIBKGikf?3kwфa8h)"|a8W7JU,Ԣ4LzfMmmuh:P ,vd 0>v}xƢko`TR7;m/L"ve1IC`7WB6',;Bgtv`qW4o~| 8 Sd찺ueMbC6#$>`(ijo|t0)Si|7Aپ$(mq]s_;űB3%B7];8sPfX`֌ĴX;-hIkxW8y_(t {ڐJWxuBP_R&t%~^F=zu2~(-4ʶdQɟ}fA6~o{cw!Wx„GSN*~*‡ Z?0kpgW`,6LևqKhjYYOI4k=àbたUQtAۻti~p36G,(dm\#'cxo,ΙI3F@QZ!SzwHA@b&B/ G@)wаFʭ*e9o=@BO䈟I m3dʎ؎ʀ >րzF|8`b-Me]v97'хfkSW.N-r*!PXЄBBUݞk[0c7ƂW*F'Z+r&9lGR2:ILtly4kTrܭWH >0{ˆEI^:E5mXuQ\/ /E?Bo;N&yqm#@f*jx9T LNɻПe)Y&]_6YtT Ȧ-,\Lω3:B ,;PIaL|%/9DsvCSukY3/v˞A}Pfx&,/(P&*cqyʸ{.uۉO (SՏQOŏo˺Ӱ?)G#\y 4~uZlD)"ԬϦA uRSoEE YN*R@P69#b#!tr\hIN?M ;np-Ԋl#Dνغ6(.rN-V5Y~gο`u@ G>4VEn4LO詈='џ̯ 0ǂV*!9]%r80dzHI{IHMȵ(oy{WF>ecX(Tj}[Fe8R1qNɣ>E!ٱaL°M>ޒ~t2F݊7 e0;Ga>tP]-x_8LZCb_2<"!J~Q}b-~Y3sаpkBtd=>>ښ!gpw_<8Xo'c]VTaUC7!29E}zE0‹8;y堕{%җUls0ML`UɊżzJ 6ϔ:!ךݛ|"[Ua1"8[˶Pч٦s%_վ0~^*:R.8%ҩQ2(71q@xaab{U#:!,sL~;:[eoC5 V'@Trk%һEнfl_cwIdy;0u>K.\ " 0)Yf^ʹ 5}g oF7ޞΘk0V]K|N-g [l*̿a+؅_=ƦbcFl6.<t" ֕Β΍ j=T o' d<3[ئR`PC_E=tt넭X'7{䑨whfgQd:G]nRĉ)Dý">&q,2N\y{-T""oa S[ "/A"'der7ǵy|>Ar^=A~}S*w*F7 el+z$. 3TXC,˪w\9X=z€}P׿An"t(uy eZ!̙=m+-FK&i7gc%\v LSV|PK'qbB<_ܙ9 Y> 9ivt|qzmx9AS2)IhޝTN4R}qrq\'kٱ^mS?6k!p2 7#Y T_^^ߎaP|6h}{*"54{RISnH:˯uraO"< 1$Ÿhtl~]#c+d&P@/& 0F Jd?NF"k[ܮd;gT]y7suM۵|_dj\oK 'aL?ͬg.zuzC!U9.;0r潨j)(Z3Gf&[ Jwn~(R wNFf )dk@Qkr2:^>dHFMPZ7w s)]drATN C)q;05׌I*\E}kr P%`g|GޝjHt(u .xWx?,;]ѕay g+~Yxfts@#c>_l#y֥˩84 `&Y~lfͽ>abHN$5Gu!_ Wpp c5AȐL   oGiU_3(4OY܇PH0PMssOQJ}*Bcq|5ed;f 9R6h =PMAD"whϳ >^=(᳥( 44+_JEƚ..Ȱ rƄ; e?s-،6~}6êEIi6Ts%*<~.Dٙ c?y)lHը@X-@Y|!ChmD '6e5bZ+e6mT{&LpvJpW.--E?vMwٺ{W;0R-K4Ekߔycg߯ZYf9wN+}˦5.c.4ͨzMd(CgΥ0T#޲hqM,Cݴ-ȁ_-^5/4tسwx.Rq}la5@1SW E!81*p>+J^i`Ё'pB/;Yc%x#Qo0R A!=KA詎,)4VEpBX7a}YʑwYjĪDZ$6\A lB2ʇHYYU,UUB8Oe`QXyz 4sBܾ#) oy:m#^F` a51C;~[Iȫ`c Q8Cȯ>jX8t:cAȌ(J됔؍Y:Ca\tIg/7s#)ItXr))]j:{q ƅud`s+$ Hvb ==j,O~?U%"'Y+ci hyd6f^{Ze -ߔ ^8ĬaAEdi6/ClۚY߈6IL ?U@>{4>xF頒9h fhӓ !56 m#Or@%EYں.x*(#رTk*~Mș&JA; ?jFi#Ai)E'nkOq :D>34=rq ?@(փ(j|G[⧦/"Ͱ}( f~z -׆E9Ҏ^i(sf'ӖiazQ8Z7.lguGa,qYb|ޛ9-iu(!Rd|H (lcG>FK9ۦw!g6Ir?(#j2gsAMN~Hu'7Y PWj^Vd[$Jq҃o@R+cNq=}׼pI UOOB^ޣ?%%Ed'@;WJ1IKS8aalٝ]ف=h{hjtb[~/#a6N¶^rqD6>1mC!'6=+,lh"G0 mOfqW [%#JIb ? y|TvHbϩjTÐLV"\)q&dPfRhʅR0T1t#BSVo!&LGKIè/_! VP=w; Ѷ7y馷 hy1iD ٕ@Fd_e- }L"y9ҕtPL| }8{6W (V:ᨕo6u`zWXכuYt.oSÚqm ˹;7`2o')gE|zfC"SKX"]|EԈj#YU0 )MV坮r|}(ٽxײD:,f="(FV#;>/hX*/ٓZAsr|YNPO'nhq!;˙^r3xJRl1f:431 v+BNh l溊؉qqoS5ōLdfm4Nz,X*ӣi *ԧORU#Ene4Mb4U~b$X"lBr$|('M#O7'G p8š) d\{DD,c](<*/cfp#>x%Љxr oO]V˨!+KbXY1B4YRr\HR':, UuFIb99=+^D?!j%r1rc{bYZ 4WdE dx?`)6yq@p7\]MЕͰkPZoO zҢJZ;c !p4p+ǩrgVR^YϵK)Fa}/iGq`@+uD2:̌l X_df C0D>u+I#3U΄-eU4$ PtV5;f >3 9cSD]HQ|!]VJ|r" f:0B&6νM nk}?ufj)',Mŋ;}F^>Y{Geo$=A O6ځ\ Z;QV3g"{m-O KnK=)1o{bSryHf9dk6{%{ALAYEȐЇJ52dEOiӎJGy6ޥ\Ӵĺ* d4qLvhRMy|M ǰ9"#u 7 ^>,P|c%/!" 7 xCG4[m}f}xKV )h3Ϳqkϗ3KrAw>l-)Yb;3u==喨% Oj{+96$}f}C^rE>ʡ| 8^i fV1𼔕\::t,3 #7ܴC,sdt/2[KeHHگŋK(T*4޿zfU(8  nφ&ABx&Ps)ʞ "*fvw*> oAa}'5 \>}erU{HkqOkK` *t =x :KVۃ)ϕW88ȩ;f%\7b(9fb1QC?b.U!EŤ'pf+]!AibERm}+Fsˬ⪍/;OJE+9 ?-@;H^J҉Tԯ,?N$.c|{XreW)lb[t=G?] ԰Ecм=}'Iea7Eg̈L&BǰD%SL1uؤ0 ֖>o$o'~a[EXVn?8aH:Rf R{Dm S0r-BrraDd+0E3fYZQ9=Yq_;k3[i,|ڄ;XNځmOIĘ(Lõ25n}JP2=$_T~DV"_(‹?H wMy`؄a(# v>M;Fc`Rg{myS:Ul7zJ{g'0= JsA;n='QއʫO;*% .tP^\Q6 >0vX&ҩU4Y_p)Bd+t >R?,$y)"`EȨU v`-x3JIm6ҁ@N*:Z?rnfEkTS^%c|I܁/6;2Q ]UOtGP'V V(T>DVU1W_KRYiz'`0Ot,HԖ@hħӸf WGOshPJ4 UPϤz4 ryR"aCCpQhPURܗw)"8=Vbiez$`(kl$)[Y 'OUUѠsxZrx|#GYpOe 0bL_xt N$Gb'((tEӅ _4*]fnH#&͙_/cױD3&˪|?x;7R0ځEUh}{ЅV<gradRΠWX ;$€-)+p"ϳ-]>䒹JVꙖop~7LHk}ax^ė۶Zk RT%x{+^Hա!^r\CttfLzZM8`Q.g%?,nڵyGz6\ 7 Xqh"b+ ֣i^Ձ BH $#@><`w-ӿ}ZQܵl@D잩HQT\y$g~eE|@‚O<h&UV~ݫ q|ZK(+nn`Hu`C6]1fyI-b3:!ήpSj yUL2,P*&K6@9aCK_ \492<1u&BQue[kp":l'mUNƹ,jٕtjr]Clw¤:>߄ eeCeNy{upruJ~E|r+eYA@C><+Cir"LOMgSf=D4^Q;|𼆍_I#7FHrKqjPד%'c@zch4q`ygbBW5ZflЀ`ggH+Z Z/Si~ѼbSIGgf ucmCB[Z 4OS򻜹-CLwWzyar3`(2ew)TbkΦkn@Ч-JX~ZEs=]74ȠUwqEҫ<#_j-FOuK m]Sr %LzzCXc3AؼxƲl\==zvi&tSPY8[ttJ4sh[mxR3S2)^"ܷ2FљNz4;O-wx^)mCMU1E'kW7[#R(G MaN 9\pdoau'Q"q?fP_Jg9Q\\/MZmHjXjRH20644g|s[_ +)TƪBLbIrUTn/F\GyhLR"^дEutsN,ot[ƕ pXLd=TC=ٲd`6gsv?(/n8 ΑB<}4XGWpm3j%eŸ_`'ZX9jښQ#Yq" p`&yj;S;k3`/ St!R^auEs4[(E- 9ضj-F^&g>:SfMKY3ЮW]|3vySf\vdr=uvpԌ&Kvu(zЪL_>@Fbdfr I+kƈ|WݿM|RܹeAPXѦgEFch,7խ:_b`O廔O)74gQ$q~& T!Cpt"w[,[ROF3ryg {V}$pE# E9ecݑ$8nT˝GXv[0z,5K-~ rtZkuW7g! >gIs60+ .Qտ>#>1plzՂF9VD 7[:\5/8 yqȒS?zJ.$x0M^ql5koIwnS HFTiyH) `=ox$e,xIw R֡4`XK.*sgrIxzۜ[VVPh^H-quI@_pƲ"&`9]wvէ;}7JESӠ q;> eA*N}[տ\L97Lɤ+e6A|)@E7"$w@l-j5+ЎrTe%ux{ x],{ 蟇$_WvG(?w%(z>@<.LJC<m(޵:m6ɁuD$kRh ,v?h׍+8k\OdOͦǟ({C;-jGZ(_(wQ> ;l\4MK5T jB""Uh|&mz^-,qn,aE2)Gd[cϓ͇_JP7d`h<KYwlQ>)?k` ǰrMۉ6H>!yY݆(h#_ŗD< JJ' z'*uN?3uO4%5(7?D2qT2!B Y9Yh◯ A.'7(̝!Ko^^jid`u@ܲVXBf_HV|d}אX`Rxq$#m+8]\~GiG"\os{+eihׅuFbH{--qã2Bu<31.e15xPA# vLJ`/]8l@P .tfB2:DeF=EY@Ⱥ2a8OF/ό8mks*;\J,V2XDP"PC -A ~:RT3ag2M˫cU(qfe>ģKM7x 9H| w"N*+6[ϧ9"1IF\G~7bĥ'{V̦~0IJ  .ˀIhpv !SWV lח+ w?9TpJ6\=c_5 Ouѕ ٚ D(yycqwG` p틿/VF'3qo%Y C& c,sR|UvvnZ3j. 4LDEťd]Ÿf덾dz: Zwk{~fT;,tL&*MyH2to.)^)kbD&@E|Xa: i$,]Ul6M}V.f[Anb״2(j b;݂Of7;sdyY-Pg,!(Y4{Ėѕ}ݾ!ĉ"'?CFAn$UEv3jrwla$BYw;o*:'T naK^TQ< 5'1ѨqS'=܈M޷.i9 XXBV7ď21W_G\qe TaBgJ+>`e-qK ji^o*CXNN;BTCX)!~)~t; 1""ѥ-Jyd !.gʻV9" Rvw@alj.vm*է9%y`Ed5lTn6ulҲjBewRAGs DSoו-X<q>&M6%O] HI~hGp(IHLQ!Rgd>pW,U8,i^1W)\y]A`lZ }_ERcnp^1 odlےnVvX?q,+I,BΝVlnK3klsr5Ն6?0+eWAX>q]YG#bF>EOpUhu~0‡ߎ8^=i!,> Cŕ1$k Kڥ)3R.'t}ԇAK־~ Mw& Kb11&|/Vtu72F1>Ś]4`k&C93IetDfX4 =A~l ŋłPf9xc%y׸<u/<)R>4 HȒZRZ|+>fpWDl|74+TwE$ >&qr˙HGBkNUgN4be c?+1e}5fVOiSLUɞVag&sK;Ij֗Q"@+l#$:A͓4+LuBK?v[GEh8& ~F4_a~,qD u՟Tvgߩo]~@MvIM,-}[W)AyQHqu7xoe+k̵z \WAcϓ1U{]`9&k!}AWƗwh`jM7OkfӀ8KT 1E w mHcRW5N2HW"<5Oso19hrWLjh^)ݔ4/h23^:pg[,C8dPڔoX+A M; a')!34ek,SE7GXnіɺP)p}5n| `odUq~~v3(6HvzIPjaFv\p{?VU?͙q7ޕBYY:aĈ[f30wL++ơAaYitcg+ du q6AL<ݢ8vz$'<xmⅪYi4b HqbuVafsO5)'Åde=Cz3:6VY/Ivh3G /N ͺGD4׿_j4P=ZbZ6|-8M`>ׇ1]m򫇫>u}D_JȜe-oIqYہ#dYcӜ=9vߧaܬtS6TԶ~{9J/c*q+gz1e?r `v̱ꟙ i0s,10OV;]},E0X}&Z8Rkii1v1}FMyލ&69בi$ڳLc,hmp^g!*HB>(h6` e^ddv?lMw ἧ'$sb3`id3aL; z]d{v->]qFimEkut7lH<:<Ǯ{1Pfm[iBȽs]"pG $j=o+}պt5XXGZI3cbw) qt:LhVKI !J8F}6Xk6!u( $阥`&4rM]bP^mqPa۴Tyn|<Dbq^V.L?Go8.R7}5֍"=pՇ=c\a VOEl{ V;[E)PCq(g)8CP~Y\  R G}l"b񼪫,q }-@F#QPg *]o,h¹CzFzSd'`(;R+A@K` z/Q M|}~}y`V#o*e)S?F NPOag|AqW9!t P:0bAO bv/A*CD BLiGԬ}o+CU8 6ED.oaWf[بB:}L$zru'z`&&ӏ[rT B+V n5`ᅑV  }~go.xH@HͦX'Ձ6@jjr%y}^\o oXpԙ06CF6BRzJy.'Ci]{=W˒`zCW.0u^-:L%-$_1(o _7U3I M$B|5&k}zʡ՜uDrn #;i㉐uW2UJ/+kO{@K8FM:+J2GHe>V5^3"ye}Id?ֻ @]:KQe2{Rkŗ!t!ן^N! ߫˔IT͞ԈvIoM(.=$$)uPo~g&K#Z}2ΠC7c0byt/Lv\ +,Po μ6 ؘolQ >ПUE̳Mr@vp H;OwXzsS7F&Vi!!n+8&HFe<\ݵ"!8k"uti$YCaw8xpC<C8N=H!߶ Pr&Q1O栀*Hg9B?$:iv4Ztsl[HuJW[|e[WگASO!χuo01Z+%"'P `iQo Au |kqzo;!oW Qŗ@h]qtkyHq28&>p]Aa0h+ztxn a֝n~ {veGưt]ćGL>,xsQ?ƋsqMt !y a*EeCYEj|ZvNuDiҸ /6UѾ{K>Z2;I*)fu!&`٭LȅPҦמ cyZ/խqT.LQ%9s?n:o5ªE'RBchv4nA%k˘"|͗my,~f( y¥)TBZq=GwFQ%p؂?+T4}ɼ+}w(J_Os(L.FUtL7=<00 q:afF9.DZDRD #0ڒ Q]^Wuyz_)jk L!']eAnGz¿u]g/ )Mƞ&EE?/s_yK+T"̙i v cpCif'`tuadd19plm hɁӽp5tkV^O+M2nYDWuS.tf.gNq4MfM;f' )5Nl|Ԇ?ý gώ+s .tse6uAL2Xq x΃E0&ilC=+.*Ŵ36[˽u.ZqYF/lLɃOIl~Y]I V ]|U~Q23#!͗6WzuXq6 `\*$ wzSOOW4u kY{iu=&!bC+V>ذ}T( h;MP~5k"R?RwA[̱ Q$ Xx|$eGJ9r"3+O4ڊ"{94;E{ߝ)z R2s Cp*}W"gn` kZk>c쬿߈ӦZ:Rcd!ǻ^n\bAWk5>a'RVnڈ.q4|;k~jB;JZC6Tdž|ȨHI;4J'['?y82Giv3ju㙁J@;moTo͋hx"e{Jmذ2ČbW[2ڗ.wzK]v4' qm-$j;&ֹb%EW@GzOt6ufFvWYc( Mi >9K+Jj<4 !Yцw0_ql);>$qtD~++4f9> ֿL[I!@<º fl;UoV.C*{\=L)j\w-~e4]lNmE}Ī^a xYcD!IS`10=Rnb琣N~ICmy0pUubᇖ4Ø@'Y|= ,wW/#ɤ,uӰ}kTGK[ c:D$%Lq~im&Yɕ/xEl*iD"c;5z)#Z5ݓi-F'`$mqc/ ױO4VGBm{֖k+vΐ䗇Xky9MHrd)_!fচ=OJ/7_r`9ٲ UyQk?v{{'c\<jh83K:&({^7; ҿ?)36=T@y`L̪4݋Cv&IompW{+ iěi8 !e*}q<)b G|Uc`pGUN>5᫡񎭲t`Pʻ(ludzyW $QN`rjf#v-}=̩z0I+MҍS5XmJB\##KIk\uN;c=ګH'7D!@(+^R.ƄA6%M~?;K=um UGCTeܱ<_zJ"݉D>N&u}HW=*bsnU) E2P#E^z~{dZMz9 ϱ;U E .o} KQ XɆ|]?˧]~S0yhp_La-MrLs َ3|A:x3ARΩ~f>f< vJooԓ CqI|݃3ڷ%4RPeRBG8,!5v,w>)$x/\c *~S~|㡵L9pO͞,MI%h"\J=r=QSSZ[xI>Ǘ{}dt *Cb7%zc#0b6ß"3+=xf~¹'wG4y-p(!D.xY.ͩP=; $^ F2'N)M,68W޲ϙFn(/LԻ$\]Q%c +.Xni9rlOHC\E[ CE JW_e_h))Ri!SoV,䋚fIc秴<>=cjrO{ ۋym8 |}IyެWeNhanDiEBύ!ܧl8'FtO,⢼޳&=csrd?G=keq `ߋWP7ixCda ٵXnX_aȅ=9]u΂kWܾCcb2Muwuixlh켽;77D-T_S83.xwpeh%gi ZZd.`9˜QYnTljL;Vh=Ug陞h(Tb Ў W@P>ф3ZJVX:P 7:Θ<x$ݾJ"Cbp5'yDibyz=Ƅ!瓈{(PhÆ|g#@1:p#(_^ڡ%av[R@dx}҅[`5Bonp;.QC}ꤍ}i_Uʍ6{tV;<^jjy^K+X~;8ma<ٚb} w]m֍ 0)఼>`[J7d>4KOU|'.x(-31*]uPT 1,ZVM>D=(ra#Bv"ǂrJ FDP5<2Yׇ`MW2> 6FreDŽH5eC%٪` 86Ho:V)o:vZ\*υg .Piߡd-vaEeōQq: )"-d$%nGU~ b+AR1.$0HԈ ˃i kgۊb$x 4߻?[_!Fex[7ʧ$UJ)TRS@׸LsT   AjqĆAO ]'(]~G pѶp|{vGicZn^d4_X&o,n"TE8ѥKjP8eWVoz ƷP˝n ɐf{3 ~Zy,zrO+elC]iOc}3#EI-I[-A"ʨZ9U^,A81B7/oZ8{Icj\a1ɢo0x:.ֺ@X̯hF;& k>q񓔑B&J+589BіkxI[m%},rKx N'YĴLg_ב.h΢uiUNxEV5$Ȼ:Am{|_EE%*VԼ+.-E2vSTf#RR=j"si GrےB`re )}=CNeAM*`?^U~o6՞m~Y؈#- 4}k ٩ِ_4Ewpu 8t#JͣL"YdliѿvǙoC aQrN*EL21)gsvIⴘQpw+t:*A]oKk8m;VHkBEn [UElJ[?&}3;9pȍ#O,\VWH)(lpj[vɄjq@|=2:B]fLo"ݠp#8  >0HndD+?%.'/UxCw5>I fB/Қ=l-dec'>17 *^hĦn!'Hci kW>ԭ;B-/}X5۸Q `W0mI ~ ƎMF/i[DzP|+`Qtmi ہ~+Fi_D M*OVo`3zmHAxD6jDcj0d7_AI%%:}!7 &ͳW32YZ6tZ ^BsFŒLlqn<,yFDyܴqE.0?aQWG$edH8f1Lï4,lӊ}(aEDrd/ezcd돜uꢒoBC>n{uag?s|[+DTѐ-L!g۷=wiĂKf37+K2>;Cst}*Rފ p[12n@- r}-JWE',krM횣O\nq>)g vg^AUwo~0?X\s &KfziM4̖#l(9Yr~7QRZ ֔-`"N^(٭K mv7Z~oqzlsL SZ01&,`0KI}a#؊!!kGU؃s,M2#=4~lۘg'm.tC~ _ރjLsMwͶa<mYbX+?cK(f2XC,R5+Mg$PlRVo߬f7Cu֗b]c)#f!-(?YlG(9{>7KK%EUzHh`Fp+&<CSVPA[xLF4b9ݣ<>^mOBs1Q>.dglp{ɽ =MW 7 &*Ncrkum*dH~w&7~ 8"+ym6:9WfIt\B 6&fiu>' &(-EMf#^xC*<{18{E/`6j2<.@E)Z_7~ު j^X2'\g#Jz;L&O6!.F=GR&)CT\.bH]xʌӞSYѿq]W3cߘҢ40ArtFu%7IU1Tނ9PC4DXH65[a.ٷ. [=;Gǒd>l >.K^D(7rcl@XAi  H2Lᨣ i8W+'w{ Guʹ `kόlޢ2(wo{/ \3~;3O }RO< ]ti必ǓG2 P-M䂄 XK>W*@T$jCA`pN/<&#%%OP|L>kSV `_]{ߩ^B0xڼc9ե?w&%XT0O%]ty=wŷ^MV<44RZArrY~Uyzu\w!SVSX c,+_-"^ $q*2kHYCN+ ׮Q[N/|lR&/Pj'`JjI1%L!-H|#ml#ԛu]fIýsVS#à.a6ZhK|X1B?r` +rwv9NQW^s:,J11{q+IXzb&zZl;ca=dVφ=webBu_^Gr*v3+ eB`S;|oAA.̒8*uXx*(l7z}bYBKtg5*S 4䒽n̖!Cge];tj \s~׌kz LAw޴dF$R6# Ww,@>Rq{%&0shw)(/Di&h;ۂqOl82e gZ'yAirM@C<9n=x_׈vpWa}oTl<9?3e:)[-èiG4)z~=Ԩ,kԬBu7 z&y"{^ƽ& gnp!~#*2UC6+leLrnIyK^sqBzYTJyU&)z̙&E]G хxǂƛ9 iGbi' 4uK^1?tO^vBEo}b5PyNqB <%h pel oҋ5%.ź# +!DYb v[:fc5e|:仢s(fP0GՊ{@v@ȄAQp;:&WCHxS߂p%A"dOJ||`YX"25 l{z'vTqi~*ij֝y Q/谶43xaEɐU9v}2KMJoK%*]h7^:0YJT oO'g*t̅h#֋n '<ؽ`Fc%\F[=3}l! RUY~ubv(l4݉bEq}M=1>bޙ4x|"U8+N^M;++v ɊIŒUA)ZQ#9K_Q9oX[) G ue/iy ,i8t/8`-MKE o4pi?TͶAK<M <\aԬUӨMחB T̘Ԏ_$&{TA"m4(GOwG@wmhRGwV2":\, իڹCWc *[]?h !_pÒX59b ZҲ봨gWI+ibstأX?rdDj\u1;m$Hr{R!S\cu!ɟaCc8Wo,enab51u!r n'[e$c6rZ&r$-ʝ:itcy=%tRM%hd6@đx&5M:ڄ'o˘-zgkgcVٛeZt `}bM;7xo js T9 j!^Ӣ$}dp p8shb7"uD! 2}5l %V` R4jDqAkmX<}%/_< ѲiQ=ɍ/Y泏WESMۡ9VMlTe#DX~ZsMxO8{򣞦"uJV-퟈}AeDEq,VjF\z3ɬYHOgr@q)ڗDz'ż;l%"/k(!G.Pr ]bj}U_HKjIV7䊫p7C5dJ^ oOɌPGj0ߐ#de~($NfHlc {odזe@ef(k_}6ePOS(#3> fBz`#4$vP N$>C4~3sU{+yU_^˧Ũo ~-E= JӥδCt<M31'?a ; (I^XWq`*_ƱHj Wbq% aW&T5C)X^Zteko%iS3&Dvj˶7e`(ƤH+M?@\9d XD]kȉ9q{YNh8!OO XZ< 2A8[W͎@S+әY!}[du ˞m h]`zׇ!*h@M6@vmesyh9JN?#5ٟKڣBƟ|%GuL9`4tͬ3Gva|+2ڣPCH"Dg䲂yQ\a,\֕B A&,,FH@߈\irqb:R~D#DyFfqH a-;3k0JTWP8bpԧ~KH›kmC02xvVwZ-A2xB̎m;K1mR.ӓJ͓gą ~]PCDwSCkZﴵ *׊yޫIJA3O0n'hG2!e)f j#5$,E#Vg4CGd[ lalms|+F)~@o`dʰ-}):^hUUBHXgFcg|Vm&@XY\"*fժ0j<ݮ T@2y]DjXfUyJ? t#§D`*`^m.H#gm~gȠa* eun#\z6He@e% ~#Cߤwn>F%Xo>xv1tP]w_P}֐h@Л@SJIC}Mt.|%O.) Yrš.5jzPLpc^PP:c i(Ϲ(Bt bhY IiA ;rZY?Ep#g|# |=) 1#ԯ f VymRqo+XM}7k!3>6pAǞF7 (UWVwC J-B-]:Dl}%Zxtp<7*fS3NU)0Mo(f<¡6g}< ǦM o8sͥGgL +lmiGujvlI0B˜Ì3w7%!sB26A2 ڳ F87Tz=\hG%ߦ?ηp3mıN )-Rl3ӹkc0mejt@uzi"' v Nҭ-k{DWHP;8D#e,ϛj Ιp S Ffic_Z"^v,Ag'BZE~?F4ZGwMpP*N|,Ѹ4 OVQE=n3%0Kd3zfK;00!ǜ>i,t3(?Q@ц7.?O[ebx 8g^(?)k/ 7w\l|'ϣ}Uw$Im;Uky5f7h0d xF$A@C_ا[ ӣ=#ݸr8b2^Pή=$^}YMm0TyYGI )Ur?ACJ[gF%Aq (Ox2̃]7*'X,*m EH]#Q`nyG+SAfk ݚ9!76z-6A-Ğy`(nIYh`vޫ`얕2Gdc0vD3}|'}zSH8C0¶ 6|jWm 1v*_#f>f{fۃuu,t!iHǂ,2V{4=X% - +n %l]e >g<*ig4o {H 8C5Ƨ1u瑀ad7ҡ0\׷5['*C/lCGC'́PޖPjxWٲ~~љ2 Pv|6 OKudAOHF dMF|rcs& )އ|TӬԌ~|HSk2ˌbMd:f%5 v&ԕF26ֲ9Jv{j-СUHNZ_ДSɄF{Oe#c"ӓƏ:`L]-RA斺{w^n_g2;Ne'}^Yu,KB X5E|y\v/xX|m֎z*W20+t,0yqbLA ig8nBJ [6W.h ጵsH tg5Me:V@IXM,!,k_Aֳ[\F=M=NjDcW>KX[Xo*ᐝpz}һ ȣ!v)#3@Qb9rEIOi(zamڭCK}'f Aȿ 1=xlBK v|= {P4'zf(LFu:LMsnvWhvb@yYWMAaPc,+-S>rd3+Y-sp0%m,jHOM[@xǩtf],O۝XA\6GtM"_a/=󁺴 `~G?U-o0x[@T5VH0C({KǺELP- RAgun Slu~F12D<mgD0[OרYl%1 ,"0dֺr٩>s)lsgABpPF<: a֏sMCjd@,K*'[.ݪ-?wY8uYouHIîhrcLT)iޢŻ9;4˪%jEy[TstG;p< ӌJۃ& (zg@ V#SW3߬Պ5mi0뛾\·C(Co+XAskEUq|%@`LBV)gN'uܮbBV qrav:o0h.+FH;8Q]`:kie4<J̎1m䮹U}UI=GZGW|+' ,T$OP H-iNݳM޺\r -B)}="SaŇi) D֭G[.C|v)j >t /ośv)cnp0`!Ղ7R\ %cBKv_{(6VlaMY9~ySqKy!܃LA`SNÀ"=#u-MvN)fƃ{.C.\eߟ>J4Ӱ(oA).G9.X^1{Q2\c-T2ANHGhcEq}檩 {YrhKsrGrih VȳëKMXG۸Q[I[m2ƌ\~B>23qLri* n6%2;CS"y󙨩jzinϬRM nw*Z$He@+`EܟZ9x?(}ִAʶ1!z5Qp<8CW0K~dKoP^pq8 _](O%9q4 3m˭`U3TX+Wu5œyűW|-(FF,L~4/hskQ&q^ʘ5o3 K{˘Bz@(θ/Bs;r9y޼e05h_..IJ>AV33 @-<)'QBfs,Tyֳa9O#[,ܓ̙q-ir>)Z>v͸#Nۜ|:%49K:;XCGs=(P!H ǿezל q2^.hP g&.b̳/qHjbg4' )l7f}-1}7lt?j?)(X%i7PؤúT8.!qN{Ko| k;yԖl~NDfSϡ{#(z)N_⧚޿ uKPxo W"5ے@zX}"dU]CK4JxPҥجQb-ǚɊ̽J7n4+1T71Ҏip_`o%m2 ҽݮ5K[L<!QԾA} 0׵H BxN_&\%7Ks~.u9Q|6H0I9ʜy1!G)p[TߵI~24#)j39򆌞JI\=8+*}"9k ԑb"RqZjm}v {• Ys?AV%1[ar#"׊tmN/ 9y^ <-/.ss?Yw^O a@udSp[`od4,q {*,o"]z(=Cu]%Gehnh~E lobȚ=~uO'D 6'{z}m;lۊTBvTkF$9)fʉ/ȶLN6*W wdkh G/RRk(P8(v׭);"W3\,:7Akt:{Y}l 1JlACVH˪p tϭXIQ=Lm&)뜊ˏdTwϏjVi5Z$;/gTrY誈^8cuHqf=y|2sh{Mf_/R`>7"v]h#`pm GQF¦`wݶx76s.eQvAƦ@KM(/81;/w$л';Y(_p,aj{Lk-:{;uTȡ p(.'F}%[{BV Fw.Pbԣy#\6ʴ>p'" H%G&O1W?TGYc|G'|qCOHA%CX*myX%&SKvH㠥!f _񬢁Md-XGp>U lIs Ht2`Ql$e~ sDpd<+ N*R~0txjz$9s+iؿ?v*Ҕ[36\&Nb|@Y,oak,JNFKq0voo1`cq3oE\{>ӿWx/Hw3 np߉5(lޟ$9A+zsdU`㩖30`w)P[YȮvxx粰YL&zNU#z:y*J:XylaU-)9 K%Q|URрN8Hoy<45#ʶ΁7nv=n>8Z&:aƈf|lCf z^Lj9Nɻm\L$dxv$e> Vw* ?]ݹY}1(1 \_[Őky5+kb7J MfF9gk†dsf%^S{y<2Y3LvHa(? Ii7pҋ,ͪC,=O_fpb; AŚ I綵?NH7Pz78͜'> g D>n c8YCMY}jkK1z}w <ƮmZ`Q3[&)؛\?}ՙ\1:nTpJA:5њ. y+TP)5ahk5|G(:Qҙ$pPMN,v2Q{[>_kB@Y6ItlBJ%_9$ ^2r 2N'ɦ OHHq{ z|5zB`Kòݰݧb}׿cf:1kMe[>vFys5`JC2,D%7j٘y0Tey @&O&ֻ5c~ BnU̓JRyu'p|{'ФKNwIF?j L$*$wFf{2kqE;H9OL*|n3f^v֥R3vzqlxK$46u?#.L;'32Oؠ@jh 0r%^NjzxY<Lp'u|" ʲ|K$ {XOSdfAeZ ,%S? $1ve&c`^A .r")ݬun15'& (JDi$0QT]&@G,,YI("'A$v}xt>ɯϳO9'd3:;z-<#򀺅3]o}FqC5FA*[Y1l/9YXa%bicA0:c*ի*&7JF) )Y ?ԅ*m+fb#MYcy=`6 bM^}ޚ2w "y#^E?P+؀m P <"M 95DRz/:%֛c˜e;Y "Z?8 5ŗXU^Nrj=0Fv^}4qRid{ Qf.4R%]`$]sp8 ߇?;aݴk6ң!EL`?kD3BSGw7^笄THX+ +M+Zc$O[{Sį6lL:q 3\X=]֏f)&jjG#?MtTb0Qyp17< Kդ~hEO5[h/mWUsI0}ܹo\dk߆uejTk Lg6~>D?OO/ "݄k;(7892Ýj_=pCp4jh'EY7Z*ݟ]_^1XYC8r"4M:LV^)ȟWZ&cݕ t 3,Y6]iZͯ@*7i_|b&f ucjX| m<U6e3^n6tbu:)MSI'*,<$&|z׺]ڳ柰d3ZbK-F(2Qg|,ÖuqdHA$+ _ZGJk!&eX*Q@⏞b!sYM |L[d A}\(.b.|pu\EA5cR&pl]\o(vf)?ujzQzes H2x!ز~B{Zp2?}ࣞ.b~lp _]!wmS) &4U"ay06L[gK$9U1H՗N%ꮃI L,+'6;mkY?Ƕ0Amkx7QMbF,/r_|W{;$'2ɮ:.cY%&W1fzz%/0M5LZ3_bIq3/_,5vbg4G}${ &bBI@HW4'Wr\LZ )O&TLPMt(>Lw(fVqj{KuT& UmKH2We+t.ϫs/Ҧm<,xhHV5 z7D0:ԔۅNI LngH7 x$>IP(AX}lhNDB@~0$ɇbP2>sLl0{&6֦Ó @[4aN*D:"V,JU%VI@ As)3Dߑ5ZԌ: y@3/.S;-q$eoAcg;j><XAl D<'- \@J@ev͏f|~pP醴WY_d NIX(Gz=8J\_3HD^|!GwWw+|J[>%,SCw[Q֫+NiI[+`+_JNn`d<_]$S+=1'-@rI_{ g?+JuÂ[kV QCe@ػJSsw3 m6ש9[Jç(VICI)K Z\dd19W O&,Y?["wa]|1%ԂݲHqgx9F\0UpEa> V:nIc$E};6L'rro0h]4HқcyI}P S0}Υ?7) .u{|-$/ͤ j, &E*5!$xZf?)S7%/FLjA?q&':HXF2/c}19{^L{$ϼTr]S"(ɥ~Xi)Ǣ㓷BHS J DT,_Ev6IK*2r>ہ!Mb#רqfߏ?5>t[pǥ81ɫ:%fl֒(BV19v _sNAWn|VB nw\5?NǤh1 =հF#<hƈ?@nF*K8wG(pO'es%a <%+_yXx<.[,wtip)ʺ:WCueNߴGҋ['E7bbhmBU`J;Em6<{ ewٓ v !Xțw7w{X݊F{k|uʋh.E_|Rb1b0i"LsYN~gx^dh],ZG5']fAsP%*h6:Dר{Я7Ʊz.r%!F2aIzrW]&:s; :PDye~(h KrlΔg[ݹ<\T4HB³´t[+dq7:,V^Ǩ $+t=趜z_UXę*a5#Kji:V fGZJR&ԌF!JLdSʩڽj,Q{uX&?? {UŐN9Bʱ1sW.NbI_Ϳ+UtsvB7wcşa-o/YoL<٤Mb!)|>N@ RTm!Ԉ-ġ5@/YOXi.>'HZyjz<2K&44(['z 7+MDhs y j+0?#րlP ܹK^0ddʫ};Òz0՚ai7V!HS=VGˮqb'At1w~7N.7WKދK?)tL5΅z@"|[Ԛ6b:~aȣfeA )]pRԩ:o@vVPXɯ5L&`}/lzZV^\A;,%D&d`\nPuVQB+b:ddrܡ!tf)էI e'3fD3 +S#^  a6=c?MjA +ݻ6=9G\!{ιZybӴx 8#/{ H{ͻxϢ.^uw5"o TH9 OE[a$ TAsq352Y ir4K9]Wp0fy(;+ּ"vegU:N)A8pЏհIMAua$143w|771T }Cίq0`n,4q33J"rrY.VB]鈠5A;XZ1V&}܋Mdݺ#KbpC7O1c`#Z(Z}L^$!RY&yLXu a3LyT Ӻr`G(IWE:DS%4wRU}`68>~ZPc _ *((>>_h.qmY}b[Ds58 b;L3km+x`;ra}Fgl4ױU{WOsp\SWgI/L[OTd6(=c)s: b.#Ȕw bkw{Ni'{cZq$iuux" OeO .lJ;FpR>;t.%MFBټ ԷW y'(j#ᷘD}gi|؀;_-?hIT](g3v3-ˆ[yTFXJ(#6}r5I]}〦Kz NY'W/npƹjnmG+xӹg.I\]Z-MXX)3 kbGfy %g})}33ހ7CoiFΌzJW'drB<SGJGZm?ÐϣG@pPJD$[*Ϭ`g5++7,8G%ÆR6/}&v[/5_B]s y[8˓jewtw 2.o|GN6E 2ĝn̽j{2l#3fŎ.+מjck|j!1AY q>2}Ud61Kc#H:Z7v-"1ɽǦ'@ޛtU#%h(\$X̀WEz򯯥HÀwVxS`FFPENǜӘx# y |$?[k5;β.Mb >yϸk=yr'pB1rJMm?۩Ds*F_CTUWK:UKYڄ:CmQE*i)tQU>&A@nB sƙ*iHURffNQey]Íd[T%G\`̔~{(r$ _wSm;v-lFŗC) -ᏩNh՝IeI}P;ECv_+A_A4ߚL'.P/avknwhE땪JZ-i+ !EО?e/Gu.{Z 659<6h1yzmhn5g-9`8]1S)OȈV s{3@qq=A}nǙ,eAuf(9]j;Y(G l 0󟁶,Ǩ-`/HBΒT峓]rrNk/>RTi2̵K{;EhVb3<$'q.HQy@*襼b㐍 T?Ld)15kZ>JBYgDʟ8eҗf4ı"G__ȓB#iOߌ*?@ez(Du5W.]' x< RJw,ɏƥ Yh57 D3!9)Qɭ-DŽRd85l{q#-J؄_]17.lAy]Oߟ(}trbk,&:]G j*O}b6%""ׯʟ Fd%z:hhOo)uVXW79b87w&|qw $, OD7Kl'&>4FAnuG hDWp%qpؾ=7XZj_3m_PQ].iMO%7X;C4ZK=Ww> D6뜌D͐eM'?J>} um+:@K@+MI>^4åILL YTq8a*+V{]$˪ fY~ey+YHOhDZp B/cG4Lv[F l1odw~6s~A?׃=iHbp:3yĪ CrEԐg,N:,k*L3P9p}W]+'hAZ]9FBoq{z7zex r $e`!(bF @swd0ǡ~ڊws b›ZpmEҋ5 :^bhLso>S^鋲#ߺRZp.{U0/WHz̮ly|3r՞IlS/ C8k"w|97I"tcz3ƈ9Fi}B0mTCwQ %4#onBШq >yRUO,S+F ÊrM?f4(Mw}? ?x}U67PJMx&;`+9gk|SuF- c.g_ޑw/VMrc9"0rx9ύk޾&ji,z]O )7qP'VA{oށЈagT;ݳߺB=,ީNTac6ghXJ-^S,B~b$mF*q8F@e A gjMs>yjDzĐb4[dZjOtC힇[ W@P ]08E6Uй4<{8i= <ۥwU8,a ;\~fb~B]r Fe3Ɔzb6&9̀Oп4^ l|\:ǁ  -2 qUj]$-L6QWc8sƯ<c*(,#[@'vM|YxdV 7$:)ܨO[7^2}'K(a8LTH;`UtZHiаZFLdb!>g=%$eiT%LK4@^;B 7|c.#AMO$N13NeTrOBk$:@Z@6hwm"8yMO<lt bB!peh(\'50}g-Tq?y%^DY-Ç]X;ywxw3> u>Ӿ9*U6;*怢 Y3@iVہp~E (Xe ͫs -?1ӏ@RexRƎgCgI@, q岀k\u{c/DŽz:IvF¼ ]_W6rWFt _] 75ppaa'Pk>|Ap.\x9 CW\rԡFf a}݇$r3kǸ#s7!ym,~Fu.ͥ=+M#!@>wK"лd7?qk'?nUItٱ85a }D7N  +\s &fʺZ=Wb80$?&Ugmt-SEg3|%(ZgOk2++9tAŃ-9 Lop嘛V%ѻ޶ړ">- Lɝ+D!ݍdXSĽ2p1S3z!wGlmew <Ӥ7tT?]U#$N{ ~NԯN Ľ g ϊAD7cˋB'{ب&i[G]ȐѶg$,^Zє[ vL]F(J $@v5!)e=77K]m FL 3APVPkd d-\F3 J8qX+$Dә2~_BB%jTB n.p"ojź 08LXMvBbor[aWT ]ՄP&,hЧ=n~ez0x,m*9 O1fȋr9YJ}F߃5A!xjƍy/cňipgYeC9L v?:X|vmP!'x/ U`C W:5@ɸ04!Q0qt~$!i-FE ǡTe.~)P"YR]=fp%˜ "2 /Z#I3. h?u>㭼c,̝R5'Zm+!BD^ z^*ؾAKѨCFNw׮w74RZ%}£l{)N=QG1iM龳Sopr F%BoPEYHcJ1-,Q&~ 5jM@ywS9/J COkB@ݡc"ay{|v4?T3. ;^Df˔@OyXIѫ__nWĞb}yٻ6~An(q9)(E}eYQUHsiɽb|m>XԳ@xl3ª"onEZy>ڪӃ0w\XZ!3&z!P/>);'N7Q#NWipàN %M /QoJyHKG|nTqC.-CESI$O-BRTOr4&zݞ)'ZXGrNKz"1OU z&~ Uyd x~J\]ʈTڄs6Vc\|DԢe*E܏|FF7QríO4hy4́BI3obN+*>ꩁ;m7=ךQ&)n߹B.5555+f#J7,v$gǔVԁ8j]f0y`ML^gG'_,f_yW ۼo& d.V E(}%zGTis OyA(Hk`A'a^þh YN&ss#lo4+5 moCS.9h1vmFFQ%̪SkHtf]5[j biVR[(:i3χocA1$l_YNEg L(@q~{ԃ]!, e$I-cs9t#B»ngW$PZ[|&'[2[J4(H_qYP7zٞC<{#jjZ`6BVqt7e2+ XH1oimM~qX'cVr^xҵmzU`ooRlkD+o`c(eӦ#L$tVqٽ/c^Y!?;z-c+Rd}#5 'wX 6m2[6/ RbCxo3f1?&D:b3^p8XAj2wŕ\ ͫKoTs& Nl]JBG0\@eqM|Mo/ynh?N؉sE9 :7irqw n2+84 R L7I:oͣM8`qf Ir=O4\羊lPdaOeIejݾ+.h.艡$ 6NjgxEƮ DW g يSV)l51McSkG[LIܳT}]]^v3ߤzOQWhPKSI IopC8rR"F~D=\?!*#g4` \"Hd2eEި:d'7J"#*tuf([i g؎TZðSWz_jT(vp0þrKAԋ#8|a;> |pwb|\h Jr&h+沟'b2FU3)k|K*G}qBDb]XR5,P"ϱ#QGMoyafwr2X_"lЯ10yO(mG-qph8Ќ& RH*ޝZ WTim{ܽDʥ%|b 5"m8M*loyd`Ј~*NawM^*n; Nt:|ĢOhED®]{$yvg{$-%v-Hyk:&AI` zRm|>@Cjz)CVݽ#2j  7r wx;8V}e4}IzkęS &7m󁝘sZz g7NPQh$!}{EӛSAɰmA~ ֝dM LK}aFTdmCx4 wDCl>Rqmĝn,MN bu),{p0Ul/sa$^ª%@~}oaGR Ȼ9Afp~)N“"lVC}qQ,݉!Y#6%5\-$g@?ÊG8 *. H 'pJ0J,M/sh ߌi 3Xt`,@Gۼ&<(}׀]Fc/㽟*%ΫVY *_#cbdF52'еn pU̝, y/U(X5@+;Ag.w峾}%OWc.%Fx"00~v,3B,}6[Z ͢<*E)oUЄJvʽ_XHw.EnU2p9UyA7f#EkX7VHfZn yef׹A!_"SaR남KbSvd8k~ +$/?Wn :xS2 6E> K*RKqj9T !mݔ´ p@>(XZ_ICF{'-Ü^[AP;ʚɢs;nS[ݵllJ]?DWnh^ إbc]hx0WRSvB|T ]K{sխE{E{!t4 bxM׸}e?":<%j #64д*ywW=Cbo`ՙ~o{[ta  >v@l-P- y-nh6ڎ5LjbXH#-!Uq_qx Unƒq'RՋ?ZH3;I-[4!uSA_VpP `ȣ }`MkUL)CZp{HKv;}uJ1XH W޺[jdRʾ<)Ӊ$8# |7b/\SS5u,UxvlU(OE{:g!E+"v 7DtaaH91&>?[#06Zmd \"x?$"Ց<ѣl&hޖj䷵*ECG bZjN\ԕHW-0A'sNqcm!JY+211np#_(˅ё'/1b eQPkJHLp/Rg9R]g6<_xXZدsX@ ' SX iu_첹4 ?!2OsB݃㪳/˂k@ahveoc4{ERɃ GTm6wo)8Walc~|!7! Nc4Jh(9W&/*b%w D Mc= /. H{#rs F3sAZ g+i1ұӦO_!42wx$JORJE\ N}2n7J , yȩs$zo/6Ĝ:)[_:rT !hzυ\L>@TåmK˧]QJlB^T| J.u~dZTѱB <(ǫ.j|ӗvIbO_(b޶rKfNHEI#kNNb*M)pz'􎠼3_AΡXoB#"nq*!AMZFԘor R4zT״#U-%=vkviڈ s`zNrC{~7,RZ!ǰ̤1w<' >ddjG]*XehӡۈԝUO3$١!l.HXT2Q?)A.2&ϩP=/٧6H^rOP\Ku,K 5c>%59{dz^EP{K?7m;D06~J*VR(I[PGr ҷǫ%T94Ź_rixzJ9lf#Q m;*ѭP3!N (",è(| 5fJP}JU#(]骜ٸ)JnQ{CvI> ЎN7Yq˦?Ph|DzZ2>jO"RZw4bP2cG<.yl*i%6ag߷7Pz"lL#bJ<1b{s7YTbٯ8{-K2 a%i1O#W<@phޡZP3N6ӥ"mݶKEsd6nPbϠ"W7ӏ;f& Ar˛ᛶC];qEn=$cЋrnBO|U]?dAlqRck>Y0E{ `|jl ވ{ lk|SzlgQ]=O5lF! P`"ֲNd.4S{nhXD)&J"   vM[:X~xcts Y :#߿:dη$'RA, [d fG1( DUw׎c׌`yI61(T sw*D NN"UAЙ ՓN9!@ԜcRy-54󿓙v3+`qeA/lm<L-զznU4꡴({  "}\GgݩNeKK+slJAvnEWԓ,FL5,8yw窤MP> YVp-Ky{ Sv z]diVΰWt=?-1نeF( ھh} 7 %Kx,R JCM  1tR˄燺{ NgY+C\N*"gR'Z(8GB9eęVKX.%5w_nZ6%aw1Nl.;"hrH>{͝m `Ӱm7 1CH47e:TW=ûnDdf2|?\Fⅱe;ԚR|ʴ\P]+hd'TBl#Tmv LscU^J܂sF_tмu?=~X@=)]f=c'jʠHe`MrYXf=3.\6I_xP O|:*`W<7j{ Ev=X>q@}|R%CX%zHE|09Lӆ4W\e]H )3H_ش`6TfӧKҿiF`Nfݓ`6&4(Wvp"=pƘbU)u Rl!6|{kX*$ƞL rnޮv\-YbS,? MgQ@)e  8"EllLؒj{ZhGJ߼z:hI#1D`Љun@Ѧ-Zv$᤭20 |,.ُ`$*tqWz ِkɡ@>dOW6T}5~fZƪjX x%˖"FʧZBƨzcL&OZ#d?iZkA5tvvuY)eh0b} M$gI';.eW :ODQ'P˵RT4]xU<.hV>Px!iJk=7LVCCi]L*eU} Ӊ1~M5 )pĪE @::qP51y7K`7ͯ?/d;+`eȆ s]=?M1{%Ca:lwU޽T˚9NlLEID2uwŖTk)X_W"d~k*m"r I)('×V-(ٗۀ@4;8rڼ4}ag=\5 מ»Fh 9rfIeT`Mz4N>yg,p8T!5FL- 1ױJ^퍎^5hM=bN=xk}{lj~ekAJ9:búocV)AL~S+dK7Q./g~_nW]C9܌1φ-ڮk#D eA]Wgf?r{?~*TcsBd^#ΏE{ Ű( kTn_Kjߩ]x9].H]1A<Ӟ;)wTW9Zfi&+X. rxwF?30)*h, q+S}:[ΡH){<}Va{S(i7KUnSqآLa104JeP3r" 쀵O]o 4It5޵פhOC79P)4N)/OQǮMNfpoʐA ƖaTDfIFޑkb,#DQ-p:mcTkH`sV"؊pEmR8y-Gl1 w*k=15@+|ݦ6j%_DldsaF~6c^"nABꜦ ʠ*btK cW40@dX]j;u-sE2k]vkXW_amԔyQ qf-NWI* d w=5xSy_E\]ב~u#TT\&,P63#r!"9``V&~gl@8lYtD -((cAB3x љFIp*a?y/˻ Pv%w wL_#IMsD,`ĕsy-5MI]̊Ĥ3H_HtR|:5t?!g=RjB)mq葱H1@ ȯ`B~9G;Rt # %4bHF'2#0yLӊStS<7/#Hۀ-SIT 86ie RC|W2Tj|=ϰR ڶv(0ik[JK#(ds=Fq0L! oj Ԫh%M*Y{ e }O  d c㈪(= {1j$/\XK0oFr̓Hjq=k?A v$48AíݼJ,+>7]d܅bs\:!tSp3e,}C+(q+[2ϵE{~뱤'mؠ*FS效 vóuj %;n,@anwy! ̣&"-<" Ԇ؃"x}X^R JhwwjLBuvߪ 6ga_-Ӟ&p=_1yRJrZ&Q3#8ʴ1u~׌~/ZQxߧVcG~0>6 n% RN(g*4ܣ!ClkSnf omzvizlvz2r{7a(DA2p7r{} enj"ct*ʸBb7Ѿ^uMAY}x'xek<.#7eKܪA5˸$8 *$2Ne! +X TQj;ΕK 2?ܟQɹsU=aԤgęwe%M!QHT J*`BC3נ@^.,uRmm6ԃ|<1B3dx)+7ܱFFPx9ϓ=4؉OH3ۅxi4oAdvUbpC.})qOEėwvcnWZQ+E(EfMK6͕_VlF&Eҫ䯪Mܥ6`_|;A-/ &nldᒣ=XR-%t[+*2cx)gFwActIXͧ0MJv~.f#Rnl> 'R :_h޵Wsy9rLM.߾6N'6{q$Ls~;mCOƼ仫46]\F:g h:h˰hb]d/cys@2yaJb8|ʍ;LU5?"דV­"%`.G178haT+D|ݙjM&ğ)n19jIMKƏ&XZ'F$e&$Yq`e޸S| ,P<5^ܒKA%Xb5x;P]$d&Y]Qf+qj];TPl)*/PSV}ulv)Q̷mL]tU<qr8 5Z˦E} K͕#e 3NMmJӑⱰFG;lYJLG@fIowsYP)DǬwD%B}jwŜUrwN&5UJ{gR<#&TK BWŐ.sME~o;}V*>Κdx0*5f>y|YXL9q1=Yә(qVOt+I,_ x͢b'`Q]T6;zDNJ>@G!2=++YYV8f`}l-'HBgվ[a. p&ŷ8 P»"_?%43۶Sf@7Tb0ߍQ}f)>xFU\pkF^|@x:CZql2ΩL"EXFHQ*R =Tu{ kUexekð2n>(znח]Pa]߼t⓽&䦋@˗WF[5Ů8 <:hv[Ҧ`5)[|58Gե{,~C| ÞS:(ޣ15z+ɎV g vS}m),؁*3FIx7%2&: 8P+%aIer \"Mw%#!26!r cgܿbxg"93NgB*tƛ"[O/ot6%OXiGkpѪ7 }[g$|h!Ƈ8Zns JY9뼦x!^Va 'e4V#ck. f]@##z)[ԑbf DkLA:gF ~6E S8J A6CˣF+xu-49vD^ bJ X~mATB 31.FJdFF(Y|d-q+D;@>e gK^vLqNCvµPkwxp02G%m.<]P ŗ,.&_yȪ!Iȗd9#+nk\/FC]t[0. )(܌WЍP Y~tK.R$:7{^]R_5LP1x wʱ]$X~D8O+%RÍfr=B z*tCgd?b(Pz /O/{+v9hܒpWK Os,oR賅&]'cOq[ҏ5F}(C fKF62M˭Ӭ};h[O3H x5{TVC)[fOM8D%Q|(8P E1Ъr;sl:ۼƯƿzM(ghW0ݹ1wx00ao8\yqzmflЄqLhq6[Iti(^ż4 `%J+ؑ% gy$[Q8fY$/8|e7Ra }FbVF3;T1Mך%e*}=-6ͷ"d<rzTr \3 soMէi+ǟ\5 QXaGYSbTWWg6D2ٓSW*;2smVz]h]g^IޯF8RMbN*"zTn5p+B$@N↔\q1u*p變l`1 ԋ}SAaY/)>1P2bPȒrĵ17( };c7G `^ ܟK`e z]ʣltq#IRgl?W1>IYΔ)7 IcMG8\/776!n5IZ#UV1;"NRWHoP"͕1v^q#Ɩr2H;ح=B֧ޑ=&*Õ֌:4٩%;HxZ?J@z0gpV3-k4nE$ڰOm e*?PI?tkbk HX!>yk%X[<MfƯ:b̷DӼ[7!΢d|Ћv2iKf%M'p7pñBh7*yHA6&B5C Orv…uL坆u钥m {n9jP2B[Rj'V!mMc Wju䭗[^3l@rEÍ⚋1_^#b6S>g;ع;,\yDѹ2τ>ĨzЅc<3;rJ'F-3Es_DD2!ZxY5 ٦@*o\r IWu}_^ x5ޟ }COȤs,8a< Ke)C4qVY1W&aJ@-7n|'%T+=q"*6~䒌 g208p_‰/- 6ۘՒMtM^YҲzw>@׼Ǟ_hkMe_A9`J4n1|'a-( ݧ`9z7x}@#r}+TTPh O[ ü%o[67q/PtLcM1E]bA\-@|elvV2<+zPLi=Dd&]~*@2y Di߳ }y{Jb $J[ER䓜VP~gx`b.s: ?ar40[Q4{K7ZWcը+5\si80z7Y\@ ]U NŦ@ӻCVh z&Rj"S-t\f6#3MgVmqF &b؈rb/]/m/ +kxɢGSYv^,Qsy4H~UnTZJ{<#pLX4Z'݄\W򾩝pͷՇ)5r[@|}$]~I*gjp H5j{+9㸮y/L w"+w=[ k(]oL )|8R\r1O/9?7nвR?ƟRR4p<ҕ>Pi^2{0˴|sY2[bC݇JD}ŜFysѩw[jyJ"zz>\43K1.>vmT.r,EOP)8>2#pU S;$-) {D~uaCwTUz׎]OˎUFH3wj~[3bZN0xQ*?jRϓp[ 4: Cb%l6Oz6d($rݙ>)5K6k?UpSk»rLy=<,nY7Uy7^{;Ur􎷕lM:L#EQj(Dv'9ѾɀX o">pV9+ϴ*o|9iRG,Vj_TjRBez1! ԓ vGN7>;B3rKNаwԻBb}K{ 9Wibtzg3,:g:Iyg m2o G%Z}{r bFhDCn, p#T+GF9nwEV7ְ})lY>i1QZś S7_oٔpqE0Mh&_>z94[;u(;Q4-B}&&qBR5,]udm.&ziN40 >mryi.eA|?y=׭-{yjhA;7$iX z!Io9d`Ǵhmu;n~aU?sl$2|,H-ߘ9QSZ"']{TLoȯ _GH]C2a滊Δ >q W =K>a7)Pd^!n@)SzD" +)V<ʡbboQ&б;Ll%L@4Lv5_iu-jZ8Rh'ԙ#*97ʝbm&FYg"ì>sz)έ^djZM]!=@vn oas~**1!L^ 3`W:kQҔGj2V􊎅J]7+rP /~0tz]| |h- Oj QZt`ȻI2d̎8A;ؽpyrgVR C9>"h2}Q:`g K>JһsN4I7TXKnA_"!V2ho>Ni< ՀqL/L(רFb]X=D[\"PnbchHɥcwTefwuVkЩgs586s#7hrT, s$'jV3WME-OHǶ{+xDTbYl|,<@{Q>6"FnqgaV)`a2S#ut:ߕ NI4ːE 6)CE%r?䜑5Ӳ%[)V9߶V 니 F@fh _pI{]S1nh4{O:R<} .X]x >Z}Y`8E±!!YI\>r@.^`OXqaج0HHPj5㥌"^߭@0[<@ ! C,2uL %e̗AGM# :H9j%f'1ѭ:xӇd_hou+Ot,{.(rsB[I_xf W1o"\1d>@{9H xDvɚcnϺVw$#ȍ}SfY[nU6Dhr0i1S=(ϫ',rVjqioYߤvvpob)Iwu*yJfj-;X>X& (Z^DL}Nl$@JˑHr<ޘgf~/5r&*Ӕ:6(ٓ͂nZܼ؋'}X9,(97rAyb؃)Y"s?~q8"5/*@AP5GTI49c.-Q%/piuvV?^6}Jl5-3T "1(ce"J1|iH<9>XmK[Kc쉯q}k^^F yv0#mnɼ.?<_ePt/ M Q~)OA:ѯft" :#g,$X.ݿo̙[s(Ͷ1NoXUT^9ϣ :i0oxkCSQBJ,BB1p=heNA"bs'+ِ~ҥ dhAYMqA'g[ Ux2:_y1s5=:9(qFʻ=b6á?hA=xhӻ4!wyDْ"g]i7`'OO[;%9{;U zM{^xF6t˛W4f.^wX;L ^'<56nHG!ZGD'G &3̛;!Eo_6=I  2/ K#40%|˛F"w5P'!\u {QO w"Bl]NX%a# ^@Tqݠ},mCBw+ϡ 1醉Q}s/Mz†:B7Txm5_v4gsɋ7e!8Z-Džr-\!MJgǦh-4(sˬC-}Þk_dtXtblS6qL] ]Jp̔9{+SݣX3>{ewâ EFjbk/%KPRtt{Y*Z:ǒd&w\rl:S|v褄ß4xJhDI(uCS8I@Vner xO#.Pj5q[w6$,/ F>4iOYetLq(!R\IAt{^etmڛ?QbٵK(`lC xދYXDL'sĄ1S\]"Rs'}LƢ }!dgE_9lc$d)x)KqUs?a :s kQ@_-j+?D*E=s{*Kx%Z6PREH+Ӻ? *tb&E֟ 8 uMwI .<<{u:mN9?by_A0LDйMgV>k--˝/}Yh[H&M=%tor7D)p%(M W%PmjyU?$U5N&I{ů_&x+\Zx{/h/ ~WE81*)xj5?PIpq-I#:Uc)bR;V8AaڜbY O$ۆ N/Q-tFPLvdi%WΙ`lDf N_kXܬ!112-ڤ߂Lg*PEޟƤMM>h#/ [;^?]ξhs#ul4 첦>uamX;wXTF#'Ln|\g**M*H$r> Iif@O4+B >7rR2xy}7x7e6 ɸ 58VO#J2( @cA=9xػDdLwm8s6ӘYqjZqSy0]]ˎUiү/n(!>O:|OvL8buh=֝JmIP7^03"@ k D g+"Ϡw]CYr[maqPrEݶ3ۢex=mepmbACaGw>|b+h42#DKf?#G{303Iw >] &hROg[n5&DD!6 ^'hq@%#0L3H8|(3<:&pek3 "7%j#eěXH@>MB@MF"gC8sA5Ddu/`q> bwz3+ R]Y 8hc"1#7O/yM+5aaaC]+lpը| f-8e|'|MemEjoP^^5z-.%+s]}8 U, ^o|ʦ0_et&.2H0Yq⍾ީYZT`asQ)ʬ1qeP$$%t;ᬲ>Foo+ |*@o8AqGr*@vЀ}}&#X9\*feo\WC[FWQpCSLO,+Ҟpxf?f'\>xA1BÍ^GpG S_4Nn$ldB4-+L BTNג!$jWE+ggM;mj),(/d-U'vsxc= Rcƺ>jE %K- i}SQ.?QpueFa/ .ɿr)> gfGXm1T) :p,Épdwe_OA삂t sO,K,n&J无uF)"2qݙ6!dnFCLTp9o<98L" %gR&-f]LZbF%cϳ6,!pEV5P/J5B6j-֯Rj{c> X[$4RZiom\#b1 5tCѰk}M[ꀿd94tSFM7*3nuk@YXTH*+ɳ'PA&;reV FusSnq+o^{/ ^c˲ՆQ>C=hRv`,<&ibrBFPtj yG44>JsF?nl b\d= tgANq%pU3k^̟t7bp z% e(*GM x.ZbYQVkqsP9H LA,HXP(`vnKGv$ kѾz*_`э4N!ۨ9q!}:T|]ǔ%MN0]`IE["q~!([#n$C O̚܃UX]L d奁'*ϰ vFK`ūn:6sn+N3.ߑ䘳qMxi= qq5o'꒡$ˮeB;["%̉V` ([lj-)-CwE~x,]d2pLF#)2FqY枖%Lus D30%[6:<V+500$[y%jwm 1t3$lM![->B*}M4$y8KD l^.8*xٺe0Du%keO11U>?XUyjix|w2_&rB/!Z_q#XOc(vN><1k框?ؓf@Pq-l RwaD.S+kJPg}9ZosE?VA8',P8 3"zƛ-=pܔ;:](9p%\Gz3mT]a|$U|5%rVr@%GލCPxmX}h_%Du!PCH!*U2q$%ʯKRq℘JXVM+~C{g67RL'V{(:,Oi) pˁ-9X߽ zZ p fàr@ :l<S=*,2>]v"o>]TLDiK0h.E&qvMX"L`I0E_2-K- i,h$"=N"}Ӟ鑼PjkfIDlxifek|j=.ҵAAob lQ) o1Ь||&rᶭR /3:\p<;$*r%dn;GY):/g1nK4O{4oO$F_IʉLKKa$>I<@oI!,!؋3fpOl?5k(ƾ,>&->ihjr=P2{H"Uַ\hi/M 8`}`IB9N2}% ם7ACOIP9ә0(;|Y?u&'|,Vi ;8eXDpeԹK F/]Mytz 4-mlS} >a|n&d5?3LoBh 1dhNQ%i-wB 4u(fVU6 vFk_E*& w&$S0nc\gH`AMpP؇[tz^XR(Ƣ 3%P_ҬT[tOs.ѻn$4[$݋{k*gĒǝ QwY 6O4I~ M1PZ0KIuF:|gLݵ WYdFVKKrۘ. =*J apI0O ppĘH;[SjTo!LB.U w"9\>G(yXP kڝ.#y2>RW+:遻@'T|e Ǒ6S']~8%ڮ7V"}J!L {" 63`9/k.b^vT Pygnz z D"b#X$!C&?%=CASk w!dMhŗ214֩.y٫[%.̉:QGrCܚ͏`BaGEY{87 `+MgF;Q1W#d;2p X|`/ c]^>әI|tNHlG uxK"\J'I\RrRܠq _t.ail;dkƐ$\< sKisP(9}DH<\:[iddR[Z9 TTm]T~.%.|F q 0E:#h5Y!;Lz=y.Jt]HYuؾ<־?Ůԟ}!`RYC] V;GO[mN=dc_@i>3PsH_P&+^'>hLܹD*Fca<)sUuB, /sE]F\@P}{B|#6} eoL2!-) үJ\guBi7:2&e  -ZːF"bP%i>0ZiL=Z&zqE :|}?ɀTkGSqAt1ADUä)JIxۖkb\2ޠ9*"6j85d%iđ,$ 8rxjp||eT~9Dκ s J ʞg x%[CcQLI@Ecx4Nܼ}lz%[kDmuà{v MͤP a >z*RX=Nv<)xd%5UZ )-ПtY _[>THMȞ.2!4eYk}F!Q[9p3j"_}5_5^("FCi]9q߻y'~AkN=%{CVzO$42s@T5RQr"o`v&P^)lè0+oCcU$oDb;QYBbAiR xF*2ՃOTZ@J#ml`8yGR6.^ɮ0n.c, <> J)HHg7oWQtaU+7]Etl֙:8Ūu o!/GϻV{b.A S(Qړt庪N.K,R\|)eYyn K5aZ/Y_-IHJRQԛOLFoev=)KyL ,?<`cӄ ~1&KICU2MMp$ˤUlƥ^HW=Sj<,i.7a~MTANDi*zw6އa:6KȕE3c*CcL;0A H5pX R?:&7W;|fvp%__4);io(0_}-1@ x|0-}/6iϻBؿnV',tTޓ_/T Qz K96([s \ /hg-uǏ)%d#{fJ6epP%9j2Lz+UMC,)2ʳk!O3&sH~Xma.R*.1O S[ćy4\ (IU 5j\EzD$-*?-Qėj=JΜ0Ty wT=P7WԒ*cT\%[R1%}`ْ7R#elg҅Ka`&@Ox4RfLYl{>2hVb``C-[}Q ]\%#y) iRi#2v">U(b$9ڃNΥpn,4)*cz֜Ѝi{{@3"Pkq&d{Xޥ!,R U5XZB]e)Z̑Ƥm#0GRB#SĪ r!L-"lts*@mg1?+5&a&|3׏l~uda0UQD Ѯ,XOfE[6#)pal.?gǁnpX`zKwyT{B^6ME:D]6c@^_$8)vdfW}"=fDYEyR+!$4*fCQ)̯ʎ&D99'vF#pS"NHRG)ŝoQl'AQS*A9lr`:=JHrKy4 v :6'IDcCf- HQŒ>8<+$KoK<|M;/1{ujo|Qa/6i7WtE7 {ھ# '| P,]0WAEt"˾,%rS$mcCwx=K3݀o`c2yi>Yݞ ޞuK\^pd1+ ! -ֆ RәG혟2āGD;NM/%BilgvAPؖwٝY -za)A 'z wgl8vz7דo `bRH &kC߇-$H6y.WF[k8)~Ls517pjC@PnVNiirQX3e :LTtvߝ GÎbn9^1F|BAmypz\2*28&vɁr9h`m8UUtA< cɳlV]x "n_rbĐOvv#R>,lt3;n=KT/$})X6 P?F텖l(}NQVB- F;-Ctafj7|*|;&M#Fsp[n1Xg{kiXFhU˙=_2kU diY߾/Vb:?72c5LQm*Ooا`={|E+`*=D0.-z`Rot2/z-:6Qz&42'V`eV+KR>o x4w/o-n!I/g+T{*L&+,6w]3qu^]W$h )Ox|)']͎Ajەm]uV9.xJp\n]:4~xy(@d}vfڂxm]4ȝy_ Ggqnσ0Q 0hw|Cs I+'o$ M26UeCv=Bk)yYRFy5 EhUԮiKS~˝`H9,^[_ƛ)JR3XɟV]C`pfQRS35C -VV>Ux y?aipDY_9lց0Ct<: + yԷ.j Yk.:@U>Tc %c-A`:kHElD۔ߑ@z~Hof:+4Sf]O.u+{@E!T`Ѭ@ij) R`+B W’<U:L A-Qo.vO#Ŕb(?,ݗqj2'tDn\ zi*oЉ6.?n, oFP"++m~kp@kYIUg<1|aAzU{ S,v^V$Qy[_3/H1*M)n?$sMaݣe'%VpDI 8H+ VWKllnt W&݅ Ei_;1Bo3tBlfȻysD-,| z~M&{+]DD:H-Kwr{8{$W3#=^h ySM~ʺ5:тp`Oh&WH)8 0V\o~Hg_kHvIYq[b-h#X"د_^m?ssXM5c,ex,31H &6މy5zjKui-}jcQߜ #Y>#L`"P!nGcFU*k5=F78{J B2)vDlZǗ#Κ lDb'Sla2!fW݇̊U ˵#YYeSV7@6jc?+3v_M<|!=R# |B);ȓ7=ߞSU9<-{ gb /4`|C%p4`\dN&7٤v7w,4-}E|/kk{,I[(1>%:\9؃:l(1DoKYϾ4mM,:%|9^.zS@+vN5ƌ"amzcZŇH3|D,@j}m.}N7JqM޸ʑZMǤrVl_JMȘ\RoNƶPj͚Q6i5 ?=yUCk7܃b$9bNX(. e4ӷ MU\x:{:7o;r3vEPgxp72L\ܱl=p dbuEcF| `i~赺&WB'm,7"mZš)aR]-Hz[3j6V*NUxMe? 닦oT]viNxQwCq{&< -э#=4s(z$erHL}lTH0 L y!h#϶=qq%^+˨8-G"T&CK~?l6|@srXL\[^*w=4TYH u _|/)isӥNE@^lBՌI'!;s@sZoyt4#t ̍} 3!$b+O TZU>:=Z!8=cwi5= iՍ8!n`2aә{\?][|("_,!4˾ªu΂"zX1I] )?lUwʇi7q᠚:m@>T{6Lա䙣keT۟Jn5o-J.{^%|C|nHekHX8{t olg m@-Oێ$JRIjGyfBz%J"#dfW6?o2t]_PFL*c{0YϩOisKw,Lڊ(ZpdMg @pwxZ =qH]\Q,;O χpNVwFĨX#\J*2' hܛ#)sfvJ>8f-3ҿXɤlC3i} F#g5R r4 8[qAZUAT/T!Ү}Y2ozH|iw*=@sA&KyPžbf)sg7ʘDED3֬ m;tk%CXuSJsQ5OĮV*+y6`Kni`0m/C;6 gú6?,8^nUc Ay@oZθuX|-V[5/5Ъ*\3(o?,83wAh2Sb褓pvDC.xPryy9{9fncs9h$}&$fj2T4(B$RebV(/]k"DPW'XO&=ɚEb wT`)s=1Ȓt87YLſH71ycKȀhB%ztfKoG8`ش0u"+rXl j^9ρi^M@ FXȴ ^FE/@WɊzpuhƑ!Q{;z0Aa ~NKv%1V㟤6H* z4y[pI<wB6!@krC,ةVCV HfHUjPv60~skF2L_k1A=; cXįжF\L/@QxqR\B܇^qBƝTbD!ʄ'ǧ1tڃCy֌OMD&3A]h{v>Z1(;@F|C ;܉QD(Kfnx6tA׾&>@w:oBG8z%rvA^y '/IP$DƐITg5`@ʕ3ZiEv- iDAaI:cmHL;' MYM*Ax>jyy[7\+͹^"j\ DZZGjDت;&nsn{WEt9IʋkCA!1X5\jL+vqz_ cAG3ņ/Z<»&t:_{*&~/^Lcy>:؇|M˩Fj|+KTGhӍnLr !na7UnQ8˭ C/E>F1mqcኩM]:J(#̮D?)p-};ʣ&YMY:I0ZFg2b1eYIaM O7?GQքjtxn\Qa vW5^tQ TO:.V6HRߒG*2HGD ==SOo慒$ja+xDŞ 1MԷoJ83#=wh6-;ּ(!3Ɓ:Ϋ?>F$L( `Uq "v.kVʐT́qXW=ReP8mR`:B92jFf2OIU6{kFWPT-L&na*đ ñ"O/d/ S~XFm4 aZ~.c_+ RK4ak7_$Rhkehh%O۽_|RN2nF#ѕйTQeօǛ'X11W)A7/`6 2͑(sqQtN56 wX8PbZ+2ࢮcurO*@{{S2`lڇ!EUk:"e&2A'Krh@C%%BXҲb&\v^߯9O.QmyoFܤJtou%oj^Vپ,M6c_n]_+a[m9KګaTN a{,A3H @h4HbPEpz/;!Un }omYimxj%5ˠN`udpu} mWe:UؐY}s+W CH`֐,wX[fu*Z$V] ` j)\m.GG fCqַu/f*dw@uG}%E ӷ nkD J0N = =x5k+p*X@{.hmT&j#%#}FV,u3ŹHA@+>t"ZC@|, cQO+_Efl.- k`gʡ6HE?GE@1Megg=[92SU?4|l\FxIPst>zL֙_zMJ]ƈrmbaPY)&b{_|F{= ~{9b Z" d 67^ @j% +7n,z JD-9gDŁ C "tUi^&;f1g19c !f:}w-&8KQ%k$$ksw@.sB))<|K0WY(qXhr}Lkfb|?M?!7/9: *^nbx3L׹X!܄Rpq!zAwR\'<(F4&lPSNMlR%!6$ZGѸyX\pD=8:2v".74ÔkpDG!?/-$$y'?S[23.dKL bGl݇În|/޷JbOWx 'S="e\o /1pz1{l7ɜY+$U:rbo: Su[728F; +֍xO|FݩXf ny'j GȈ52@^3ŵqFѭ<'UH:eP/3 Z̍MF>[)AtQ,P0G.еkPH5'F{MZHK,9*鐫a[;BqYKQA}cK mq`$zv^RNΌ{6.%Τha 7LRV/;(BgR?)Tt"RO)DgGXkMrevb}|t|*!l{un.+moLE:֌J%p&XѴL'J϶S.7=b]{t; 9-cB .;S+qV!xڧ)wfO‡!df]xG5F:B!TRu*O9ظiAֆY~]e<x0%,W,J;#k16]mWoSlpѷn2&;aE∡(1'Ns 0}yzt<4lrZ_!9+7/ަu2Y>۷,\ b)ǣ{.tSW3[qh*6ad ȺMUF5W5wđQZp*V:AB7w[km.3X`1䨅Jop!EƻkN]_+Ƿ3/'Jh/P_l\7wMWn#BC#vP?nh3p4_C "KEgVR xmr_ژ\ (ͧ?oBhFt)<cOq0\ 8 ӣI'$]|!! y%+f' YXV& Ŧ)7R2v ZwZt5ԭ \lBBVϝ^>Q' .jW*k )Yp21$:1s4W"zeJPc#aKWy|P@+c:pC# kjMDj@?2Fjʎe;5]Z>_K<f@#<̺-]LaWϟވ^_Zm֗W-˕Cu*C>S0$ƿh1c٬ W8einx 9H숤XӦu"BWDmY_g\Tt#}cx|H;erzn_,P|gMgJ7@`{ai{Z32wFiwl&Tsͭ) AC |cY\¼Qex%HnDF'Q4;)·Lg>DQRpɢv+6]LUKY ڋK感vHD1;W.V<EQH tf?R{2mrztG,:{,oce лdIQZP A^.E`߹HvU`썿+~7Xsm{-Q f:s.Yb69q'#_yH!:|[)|؎%.KW}s*fG"*{Dmp۰Q !*н2ZRuI\Bn*?cB3RZ&2=`9 O\8cE*]yg |u t. lVժN||; cO[:_5@M^Aœ?~AI:ٕ&zd|G֢ sx(̪G+I&kOH>9rb~_ڳSf/#J @ r&p _|i2EbEVݩvƺkݜO}gIK7XI}a=>)< U [m/9H2/`րphHQs $Z9}+֡thfBK76/a\~~հ}iȲIb"O*^ w3.-p |`֮c&DmJr, o%E璢t?XgG# MKg_.Z-Gbgsq 0/zw\d9sVsJ$^ [=7 'ԛv# 'cUm`K7n QWUD)}߽gtR6:~G,r)? r )g].S;բ݉xhaD7<-yE#v(j$7j]V:lO+M{$v_LeHWlрDHZ=kW(r7R iƜƯ,ploK-y6/PY)VK wO罷Hf2&>5[v&D[ itEh$0Xh?hpZ^.d!))$ݷ4]cMzسKz6]q l7,/`OzmzF9Ad *B7xv0|ٙ6J#4v8Ż;`O@l5\?VmwOX pd_+:=j{C NR4fw\ֻۏ6CUbq,&Qd"AuP0hb#zÕ`0gE^ȴ@}9P_&=QqbF61f+^&;$2TNܠ<8ud iGx}=04[{\ _>۝z@]%(ipz"׹~(0jW]b(:(&*ih]7> ~dp1#h 4U(Z/[R1iK^V1å910szzPhongy A|Z߿Oߊީ~| 3뾌R ?W~օS1BmcT&7d _:;mPwO_DrYc{*>*}^D;>yQ+%i,v>a\F \q Ҽz7jD'`* !Z#|~< O3Kݶ5L?yj7y-VҗQ2#*-D$lI`K>T 5IAZE'C70ځOAMF3@*Ê[HeGaof# wZsgȝ@1A(iTtCp~Eu13h\Sph] 8[HŒb RsW4a}[$1z'ؒ`[!UzӛÈp-e tfHߒpD`D-z'c9oۇꧨU[`ne7jfZ}ya!{qx&=~-ZЪ )/ ",*}+ia$~t͌GdW+UAkf$+E54W4Vd`'k<hw{izGbڶ`^Pc47@HEL :UE B-򘲏8rtX!D/,oU)1gvmy^ꩻOe%=aMQڹ܃=uM/pk?SgrVc^TY|~;c| K&ՅTMU:^s(;DRo[x,2*Wa9ggaq5BƼgRh(Gi)1h;UhἫue˩(lF3x ̕ 2$AOm{œ go2X~@Uƃ)_+Dg*&՝4?wtt,hJ47եx.>5 |[U>ꋼY+Ub\*4m F9{G oxRPzLvYRr>N'mg<ݠ-@&hщЙ^sze]r`@Y< ,ah\ˆӾ܅$8%'S]i~=d[i"g; ya)3-rFzy6K*q WfO?@r|!3Ҁ9T`4 p\:2"ĨdD)*Ax*r-\G!ӻ_:!,0%34*V7P۸fxʞN׍ NeVHzZD.U \jɐѬB3ZEyA+#RK4۔Yȫ6tTFSrRao.fbԏу/@lK1XHNWy_?D^c }ka.ɗ\\O!&Cߋh{knursc0waZєr$襽yۢגNqʦE1ߖq>$ VF5-]R(C~jXg@AȚEswU<=ΰj&&Yrds@C496@Z.8A7#l z6JsrVf^.,H} WM$1͊쉓P'{2S:[~|;H-r,=vC]X1&Kf%zMcp"f Oܺ?NS,!!ʐkZ^bRT]Eٯ+{p F<vE,_}m̝S|H-dw('AȆ]TQ&"1Woέo-[UGLh$ V(-gf'?HJy=j5B*k*0lib(PJ2exP7}'h?r- EYdF 5϶ \tMIuY{ܹm淦Sct\LsGwDN5DӾm51v$@~U~&:SܰUJ:аFz4kN>7oy@] SQp #@Ϸ{1ؔiy֋jӤ]/ '?)rmI| w5TKATg?{U:J)Rtchz JڎLY.TrC^,Oi./^3T~}+oDj0%bJP*jԬ1_B*r{\wZp'E/% j@eyYW]m]5-Tӟ|j[G;7GS)]N{xqN}[/0} wլNEkLOJ̱<j@F3ߔbȡb`)QMu}j@PI?խÆD"!&QެsZEDn4BQk{gug Ⱦ J7V:{76L6Xك'y:O_J7z&kHiRT 2RY'TBAXF!?A @yL~N:D2X3Zk9Ep,-! llRӵ{ ϗ}vcǪ́{m a7'Q:Pi;^G\ V oHǴoɓm KC6 g)^-Ot^4KZZRB\%|I^8X`̯ DjC(((1)R0~p(,jteĂ1s]˫~bIXAC3xJ^fFT~ق1Ek C^o:d{nl4}9Bֽ9<4K_Fi^P{POOzFDĮvi%ʸ3O *2CW@פVcMn#+gbfҸ 3ѿDa*릁%Dw2|kL5 рFvy]׭(&yD3)H KfEjZauPRxN]._%jݢP-d$V1'U-%(0>N*Ye? }Ʉ4y4B|pks'4 d:) #/ѫ|͡h0b.7akiӸZ;\IchҍCPKuA W֓8s~L5x5lIw)lk#"ߣ1y $~'\q2XϽ,SZ7t! FȈ2!VKJ$e7,Xy>2d!!fQJv&ȹp*/no*R'*g `&.8T;*> )k;2rIHY$cEr/1h (ڜ]_^7p4p#W}xe)3[5Q 9dNՈ؞mf6w*Vrˆ/M0 珞p}urxWxHN`r«ua|-Hӹōj1 HoLsMGoF hobo#zF V'8aWuprhLor~ZuI k(mJaTD?:Z (]#vZ}D, @XV[t>V KZJxOpKUoetQ@aZs`PςnQ^ [5 4S8m>iRW/{ӫAFa5З%~[C7y瞩D3#XDBg,^EH >;,@~4#AV춟\g] v= _~x2|d;u +EUN[EDjiOlL.^@%Z[+LAeO:k eAxj4OiΥ ^#폗Ew' *-n|7?\beg!gDrn=mCi"$^2\'rS8v13;lߜs;viBJ8$f~tv[]O2lP/ Ȍ1| ~#BJ\CqүF1C\:b<\kyDN^ `G (uuu~!U!m/D DS;l(CjV"22 QvA=$=٫.=p׶UJ*b}Fjx8@47{)˻sΛ]?ۂ87Փ E,쿥7c=vmِ ḑB+kHc7>W Ds;Wל_HK?D25"^ٜ6|:VY7gt F q>fkBfʸy>j`¸˰K)v *^*Nm^ _l8J}a[#)wJn7a*<+[(铱ЌLѲ|w+L<`~K>4/:S{V *ţ>`mPV h\ZO͞L-  KdW \jVdI̭-jӘyK&+3١sȓ#XE&>mQbaT1_xRҩ5C#rBҸ0"Df8 |>0bTs%g]^f1coK;d %EmUrwȱ/~yp 6_\A>$9}8q ɀETCNrv7QGC4RU{u`+~E2{ ፅ XC̳+uJĄSu L箽h:17g)UϐƦQ$iɳ [c\,tWчՖ'@?|Qg+qzev.@̩% Ugh5^\~m=CY+ӝ`0j#`|m+g'8uvz3s",ԤČ$[Qu`U29Q0ZdNt}YAsW5PM4J?h=eLJΗ:uq( Kߟ? {"[F!Rk}T?% &Qȏ,4T`^jk6JWQ!B ()©V~8=qf 0 9Nu*&~6MrYAd39}B6\'tWA,0wgû&Jg/QNrbd\l3t8| ROQ-HUAh8{fUyq:Ԅ1C(r!+l$*~S"$d∫aD pNmwURt80HI.9OfΙPV]PFG]Ng\P<-zoӂ}TѣtUA)-$4:νYJ廘; #myYd*:FYR0atsW]TM vM:GӀYPid{3B'>g^WS2&{ԅtkLjsQd"B7F$/>7`G ~V( w俴'B]=&*.ոbL\m\TEatxdnz}z,NEUU+E[4,H>DܺЃ't'e/+] „|+ w ?聑V|'EKC0ݍdSzrDYвp8샹m7gt\FVLZ:K2dAx+s:U7M"_3"ib#z_3)*K=g1Ydo7 ׁvv>mX+eVVi30VՠP9*$w=nLi&=*\PA U 9Z79,#y%0.c(v+kvNZe=rCL >̉&fo>eqkr+KSU:B#,)ԔB,.{D(ey^ ]{Ɠ)4ŵ"ecIw;qlX<`\pU2Zf ]r 6UX5V_z$\HVwB$gmk% ~ /{$2@3)lf 'Cъh.#v.,@/@H-ku}^1&9k~ov?1-O$6g`DO _5!̥\d a\^qlk+ۆقM=zgf5VI6`U"H:XBl`'+?厀_ȌyJta}mCUpsiPP=on݉P vyS{,Hmfҫ tpߛYXr_RS,B"l0AB.>AJ{Tj+5Fڹ<6O:ahFuC`W-y$XtDXm1 X+)3إ;}쨭wjXLhv {Xcb7/G9\3 _mb/8N{S`qb`RVg Us!%Ώ$- oiW')a@rQy1yw'&>V t į{(nFt7Ɲr^\9.4t"Wk%"wS3~ hդ-ߟtD%oٞs|&A0Q.YYxS,cË/bOF^}@F{k6nԽ7_1.ݾw5Z[F$x1@T(JZ >@B FH~oAD5%0\C麡;9u5To m9$PǕ<$F8o=mJ&a]x@h[ɍuau"ٜ>ѪCr OG*0!;po:D: eo$:xke#OfoUZ{twB`GQ5%OMNa!(B6 ;A䀏ܗmy|V(dYS_aٯC! 1[Sziۓ@WEП{-(OpZP4zj {hGڳ ffVj_ux0Wǔx#EIUI"_R7qM;|k}pܭGx{]H0*)u/Q{g@0TA3hѡM 8WsYNJ?h-Nۀ X$v9@_(x~>N$Έnu}O/A8Q^y|HIK7})=".%mq885s8pzY9I? h w_'Ⱥn)^.sΓad (Aq uTk(cŅPpAL3% MH/ƣG4)y֩|GP ) yiu2D2E4;҂( jJ| :xe3VX.:'~+QMDfBUD︮d+4uZʷUrH ˴ b)PY֙(ׇk.dcq Ȑ?Huc6إ{Q ([ GFXl#ER M_# |V@ c_Е M~δ.x1XLtsk3YoU=A!}b?,ՙ{DJrK&7|cj3ZKjCMT^s#tԡd1.B_<}z;M'kdpby.݇BM7~r!XvG ?2W} $˴k{QWJYӾbW(*2H[k}E]kCbn[SE2iacFʣTnNzPau$Qe ;buH*)Ee龭g x5_:ZppJ%q4 :fSҍJcA'WzjWs>PQShcGۘFeӟ$Ostw[LVF4(0T.dJ๕`JaI)Ւ{0N*}=.fiyiyFc@)~;O;]Oy*5ޔD$`LcP@NC8gS遴Jf {SW IŪ*)yjѹBky)vN4&EO~HfD9yOL6(p"߬:k}~tY*5{.pX5e΂e]4xֱzmJ.NF |(SV|2"V3 Cx?aKgdJtKvT@wt2ENKHuU`zeM T(zR,uwiDdв1{7di 2ZT<kO .PHȸ9X1'> hV9ߨG C }露tsWV777#pMJU1zl9B]GAt@vdܧe>lȔ`ޢ7p?Q|u :H SfWj(d;&ǣoH1|񹂢%O:x,HH?6-~&78lVF4p]90zDN{: 5aSۯ@I2YLT1s$v9D5 /p@oo\&a&̩74' sCSCx=\pܧhCf޾sJb'O.YC$E{ C,PXC3bͫ|i$!9}~; R9r:Íe VTW+ .q3m |ǹ ]W(ޕd(Kr 4zA{Z"SByx$(?MhĈ"Ԡ!ܢ$ H𪬖`U#_7P۸~zR,w 4MOYB F'ѹ[#b!φuq?y[L(fkڕ@E4˂uJn1DJ=l並kh4Dbpe"W!E\&,_lQV.Z%֚'Y]l8r+ŗҰ- Aaƈfu>('z)} zX:W}Xzay+Զ#(K&@dto^">LUogVkF(wۑ}99۳{ٺn y1=Honvh^|i]SeB:CԲctq*H39=!}>m' M nPf'S>Jxd=zBV"E|:Vx+$N3 ͚vs{_⨻8n7\o>-G gØGkmD Bvy^J<~NCFM$ypUT2zX ̜ۅ&Y[iGKl5}BT-n2gԪZ S++z'O0ws6CRcy陫u~)[ *zv~FV5$jكa0cH:3Gp4,X 9)DN쁀ƘHM6P/ DOt~h˺3V,J&K@enɎn$6_s[g Lnϼ!Sa3gD? #:S)F+Yk<~'YL6܀^s:`e& b&/?R,^>_sL) 偐(.vOa.8+ifDFex3F0$[HB$BxOP4_vm.5¢ _9]sdUiE?peU6Y~tfN gݏbgygxzJԒTZ}iMu=do#_ueNS%-|4_Xf iT#ݷT;. "H8]-O9g4ok9ʍ\OV";3^+B'|B/q>68&S%IBE9C WT.yRsa ̏N[QP giHM>fDVioG`=(qpNxmZfle!2+{@6YG =cٝc=(&x$Oe#45]44/Gnixl$ ºk0ًεTesSY?,e ЩuiN j!#pq ~ *(;1 \>}fNЛOAQqQ},M%{"d\tH) ϳhu5ϔ//b%TN) 3|dfA59`bEGpدE4ȭ3L$㩧L}1wAOڏڐA1SH[M.7RbE8.R|%Φ:+;';;4!bP=*"p&Țhl}tj,Ƈ7[]!7@?a@(*Tp7-o[J^\,?D tO \XΡQqO1UuD!Ab(8e[!pnLJ" _ZHbvsO:'1Y!@L!, dmMPa)g#_`^h']vc~?ƢXt|m_z$w05O}2Nr;?!&BIL }\b`T > ^kX#Ma{NK3PcL/bBӟke S%2@NfV$h 3|3R%2IbE]b_շIdI'H 9 fWpa#Ubp'l}eܤ'*,aˇWod6؂Ib@H+Da n$0jȜ])y?e‘I:G?IzS5FФb /:<t}OԮ!ύwuHUÅ}FHhy-lN`g9K@lETyoW_v=LShoB7#[>6O#V0 vNᣊ9UOcҵ7'fACLUF ]Ͼ|@ٯIRO@sBQB{d,Ri@ŏhBxVLjCs6?Jl2y3cBEF;f>V 'f8)WQLNS~ISj\{wj=|z]X/"N$A|l(d08*-ʇ$ӵA6ψC'Ъx`bK-`# h*DXhadcS7MOR#M9s:BR82߈A@xq2|ef&+nL[M$Mlb }WQ<I+`lKWV4XFlu Ѷ4z Cߣf`d(/~BRԼų&Ő1؆T;"I."\ ̏x U .o2N^I ! JխsׇtvƆ ؂^3Ea^ǩ%A H$hBP\j,:Y8GkhoM\SiZϥg=Жg0mq8{FR)v٫;7M}$ !Y"Uj¡Wq3E6SkAINMF@b6_=Xi[ dGM~.[Ή~PTNtĞs, GK'q=h}8,x .}]~',}KYW(@Ȯ>sK݃(]c>2E#\&E3ߌSE .+HRD@_j dt+~k~ {N!% kE<k[Vfɓ`v<1hpR#a:$EX Yi#g .!H'Os^Q' ` oYۘg,-SI-k **Ylx^w]p<dSq$ps%k 6o$jh9Oktņ\[%?l|rgwQvE1$>W̲;{~';AܳHG, #&'LS>|U DJ$fԓmd GΤvU$*v:βԩ{7/oI>D)е(#X&j RF_iZVOﭴ&&Q3u{(bjO0Pt]g;+wHEx.Q1<BbзRSH0WUi($'%D _l򉏫C -g$|Ӻ}W{3͌U7]PKɵnxvFe d'Dz3oo> JXCZ߇q1t5!EbW?_#X&/0 "ET%h/{bI1qY|ob_ jؚ(XE3P82]?4v Ȇ) TWIgc"K}{k))'yQ6+Z8k\wwĄ RzVZ3=̼O7^uT5Hu@n^h%߻Z?Ck`Pe ; %CzڮŚl󦐟kL ĵ#h"9} ~?UiS mU59(=OIʷic\)|Y`clޭ+PnH d6u6#aPBfdm:'w^`L廲wxY@Ǯm(lNv~!7!crUـ< ӧ*G3HeJaP$-vx9o،8b W~5#YƢ-[ mܖZ--6V {TIs0#j=npމnrwjT_pqؗQ[#[;S`K)xŤ~dRe(+Z'%4[/$GMC6m؆<(-H.^i\]U6{Tɂ>VC#vAJ<k0J~^gJI(2ӮOհ4q,`p%676Ȅs=#H^n/`i|lh@2ϰUYU;,{@ "\BLwgU: ~>آND(4Au1:>EjFz܁tƼ y͹#}{i5T~|:56%FD`|\dR8vmdyx >FN6!!k$w˝քaֲ:\i/w K~mY>Iy!ݶLkH̛Mje`U"ŸtVF#cЈ)g. DYOkk3?E|$l- Wd)"Vg ѵ1uIr$tV ү;7͓lI8Pߌ\s{.Q$riE]$ZqټoWwM> hm2ߩU}eA%I=,Q$҄㟮`;j3ũ{SHID>U&jȭ RN:v ˙7fV%1N\`*f᎔Pc9qoNAO`K%ǧ*ۉJip@nI Oa?Bs89 8"49/a!-M -nWՁ56uvrqG.x6df|X'mMgh/bIp *M/цQc a.1bCcj#,4Mny]R wq;]:86 r'+.j +E)~<]!=5l$\? yTQg kTtnq֠yo<&!c6#hIZٟlʤwlgs$Kc⺍PIgIAM ﮁ:/LFPoI"_.>en HЮ3 0"xI1@AcNݗf9̼&J~q-B`90VU=u΄ԿT")7e`>#5l&u?ˇoߨq#w./u*i˝RI-P''Ҝ\S-PӒf0' qߝB<=K0yCu Bq|1@и裂N*]$?7=}اjaOE~B.d6JF^ O'rVHZ!*`/g?7:`OȜZ;[2[>¨m^-y"GN3\O'lAc";XaIhj. †$U> QO\M^tf!ڗx@gO=1G8,@n!FӭbɁ{{r?ua$z*0<cXI6 ˒BNmG@NI@r8'ͫyэxaZ1 (8rt"O@aU('tTMGkHخdy$?l/-="^C^nb, 4Bg8|G ݱ0I"!4n|Q{58l\,mVՍMqH"@T"ӲbHjaklyAFmu u/>9a#'goA5{?L3{c^23$ZlTf)n\*9^*nR=TʐSZWulEC)f;TIͶ5<W7z.r4U.I.|C}i(RrWKlj[g)x(gR P*4:Nuc ~[PqAzWM> =o GM O Jvl!"ў?t}>UԥVG3@a.;7p+I ;lh>(4P 3"N?gt-N, ǿ0GIm%o"NA3 v=*3~3Yt*F5݌g>i-zIG4ӟ;'߮5yY}1%wa?qR8[αϔTKTܢ}]/uD{ gr亞`S;rI4IjzBP^ Z;Сռnml3ݹr|`hepw6jDJ70`Aa )/mQ1g0䌒+UѠ:*U bbDĕx_:)3O+7FE,-bˆxLӇs3ΐcC~=R7k 72A11-v Ztqoυ-;: WX]ukԩ~vCiͿdSnjc|(1Q~xnPm/pw ߤhI!ŭPCΗc[*rM?,@`9b6_i)3gOE\S lK0B +_oP4ӯ870od !GϡT{ Ɛ3⁧,4SGho@CФn9FQ;WؠdEdS6fk5c[m|  |dCu)E#q.J*_qg}P3T~;ɜ3~`ӽ"͋^+QٖR[0 =0[P"ct~]_H@_kECBھ&иkj:R9+̳_bQ^CB;-H 'QuЮYU[9o9@&`(xפa*nFTk־[Jhl̄UOab(En#k:ߌDŽ}"@ KڦjZgKX}~{ 3īQSa=t~al~ #+"p, |bKgk׀!u19vq;ߺ8K +W^B$0ښN(3YM`U ۈ;?Y iRI*]SA{8N1?"X~_ћ!!'9&O6T1?T [ghN%J|E՞<"! fUz~˪bŠ؈32I}7r9Ll!ט\owtoQw M];",ˤ8K$nޏ^H+yu:Ow/|O^ao8f DgAK儘LSMxq6.Ȃ'#R]%mgk&ggE]EIScxҌWr{)UFJ[glZi-` iXž5ɓ>/ujy!CG x{t5rj38w=a?-WO4<.UOTgbSp |.h/e%7*\Au*Scz"V碸Cpc+.bՋl)}vR$ Fi"`{Ε Ye:.q !r*ƽc#TɐCGku;:?h C0ҌL;ކ237q%|Ta(B)65[t@5t , X]޻V3 oA[Qdp{|qvCrhb?N8BZX]j4=]z  ]}CwXz}F)() ҃XW?D՗2n4px K  ,+աpTQ"/ABuUB=M yuk(q#_B_ M@56`b(hr\Q6%y#tR\1I3(%NfϐCʸ> ^s#u󼁡;KueU מv@I(߭g6B)b ? mQ-?o."΁O c5lJZ66_OX[^-Ho(v=_B]Wj>mG1uc(!nb 9qRNA^(Q@I]{ꇯâF픂~$x=3|1`,.\)L쒹9cƂ& ^]g`U@^cBIiDJ!KCqT^'A6rVwAC.IDj{} rP__|hɣN_?2 9s!+A8_!8@ huJKw ޢO15iMyu'}6WYwA0n J%w$E=1_iHK*Yy=_Bn lhܣM.#Y\\6TV6|=/BT'wiDV+z#D2:rexE= 9~Y$Ħ|} .U &C<'k&S0iWo@%9 <ūZ+5I8\y]WvQ;b {xl38ѡ6Q3af$>~|EtQKB0 u8,YrQD3E֑WK~ }۪C-鶜h:6q[qTXٟΕ|&t ]x]j|v\Ty>wN;&\LnHv'rX˟pF̾]EIN+S<#ජd5cbcԅi񤄮9}S|Hd5){ ōן sǹ4`Ifҝ_Qq% "piS-`o?rٚ?3WPz|tUPȊ#| 5&RSpk.+©o4g;ԮH<,>wjJoJ ܏y |+ˆ%Z|e}гf .<47zٟ\p~ZR@ssX!A9^ )޺Fw9 7tk)T{늱{thώ&o5,Uy/@^{Hre^iwԽs,s!{*D'abtA6YY?,^|R33 ;p \v4zc7YVq޾V C2&`3EZv ^?Ւ!Q@?Y}_=/t@{yl @a~NA)LN^$$c\q#0K&8L2dM7޴=s'sxCGð7u]8]`3*1XC(DS[21lGS3D&Kb3zCbF6e8vKGUϐtpp[#n'2vJ*-a=x6 p̺4D1ߎN(AJB*zdi{l,o4+=a)ȴidN&oƅ!j& @A#@\tP -h$?EѢUm׆g/#9C:qz-Է7XLHzĐj6ݎuO<狆@]~\=p9U `p4rQ|{m8Zڞ%ošcV_!cvaՃ;~C+tL.tj785%g~Yc1H`q喳򾏊.}U}yݦ&?"=xC\Ӓk TxMMI 8%,Z!Ϟ !ӧ"X B+kPojs[g)2Q&B8nB2 *{uC_h9ǚϣ9 hT6SkIJJS0;w#Ywzdk}yX5I<݋V|,5{wLPC woMfأC HJӥ]N]2eY%KɶB; ǐbUOmz<zĖd-AImv R2k ʕiR>0 "v'u K }q` 'm( ?P)gR,I7?B .6BEg ۍ|Ai~Q1#煣d*d4zpzJ1XTgtܨ|4 yyu Bic TWv%~}{R=$?Йnw;d'* LX t srI n7BuˁǕqṢ^B&+lHx|sf!.fX ckT3z6IGMo0{pܹYCN{VHcl}alyNfpOZmm .)Ui8k 3SB4և)l D.xY~9d`G[جSlOiN.2.sb#qARhGhG*+|PiqFڲ36š؝ *-I6tqQLBFac 98[ܕtmpj'k /zƏe -Q"ա}Yҧ?؇!zy/epR Ö. Tސ?J&?f".iߋNΌhNlRH-]?'hR CA  iwf[݃U$g>?1Z9?&%2=M$ '(gTj`շH1 Tj6G k?G]+8''a.'NM8oղ{ƍX&`F*Ëq]Ú'}Sm/]f8PO}EX#F2/hϺ g!l_ fA5'J!hwZ6@Kˌ<ݙ !ns*ދQ}Њy貗Byj;yc v`W] .˾rzN#oKU[ެvI>sW,,UM%#Lu-P-mUD!%&T{sm% Fs[1. |7Gs?%BIFiMU~)I[?cK蔴LE7֩qq.5BR'3 HiXD?5Fl̸m a&yc8YPmuNMZgv Yof†Bڳ./`3K۵36 W6,#Z6+uDký,\X-RsǞٶ! I2Y"( XJH|Q^3@x 4,-$B|9;Qݾ8fxkRoJyD=xezh%R#ߢGR V޻rsmmMDbCo"\  %t^&KEUUu-^8 .i:0pgbY SGt$5(FqbZq4{N 8NK8lBe+tܫMpEߩ`.@(O{投`8kJ3zcy 6԰\i,\E|C!Dfw<};'w8++^BIB$n?whG]CߙN6xsfb<&rZމOv-iRbhGǁ2=CXh]>r 5I4Ӿdu&{0+aAqJwu4;ܵ^LtBg W* D X<(@t+}~e٬(2D]'EKDed9hQ e#v'c[UܩAwꤩ2;:Pk?L !{彨Y%@b@QN Gt $Bj>A'[sWkY?ƻgKp%1H,/ !ljk P,:Q]"6$AE _(bt'fdKL%[M)r|]ߚÅ|Kq&|o-T}1wn%Cl̚:]ȒQe,|HX$pXl$tvPK-Ok#:^bv$ clCw/Z1Q.DB43W1V=e~M.Lbz(r a~\6bA!P?K:⯷U\"_}pB/QI^$2V4FTqXzonY{@Sg 5D wΓ-IWÈ-k Cq F!wdf80lCsN\IYyװ$r8ՐU%" >5^F H',b5'oKQp/(^]pP Rz4`E~|W*{MCm.^2Ӷn;ʹOB ,k0;5}J<R`'kCP& ˨Q_ށ\(<s~ 2!@eףoo4vŒr&;/ 8>`,äu>$ h^EK@g 2u$u濎*O=~K%P).O+k뎭mq66$DS gq褁a?Lւ\VܲbNd8G]b3 V-~Ep Yr!VD?=n 'l*?/;(͍l >ܨ> "G*cg a9l32H쏠3 XT%6T0F@=ӑNnxIM\1B p2Ԛ54-/I2p퟊ XN2sQ:p4 dڳT9E3ٱqI^M佷.Ȗ1 @ tA"u[e#JdMy63|'+ջJ\;ڱY{Y~tKz%JlGyaֹI@ JLN1L|N1؏'G˹|.aw ڡ I<=}]_SCqYL9E X$P=IS @3*sq_syMg=Uqwِ{-^ ä'`b(-bUQ~L+Cө,(V[4~?=2>d jۨ[[$(׿#]teC UaLGM zl5Y*ӌvq (k sV78@|ol(^v9F#RǪXls5HOd]Fvʜ4ϵv/,0Sg(q-3c! Zβa=n'>=67ix1;E$n6c#4gx(zÒWNtHd1ubZ~qGRa;’Rڗi `U}7y$gl 5 GLUG<x\11÷5@ߘ(C›)Ardyvmlj2er-eALXBJl%w|2Y8L`/AHb>U-&gG-V',FS$dg/a b `3vΥh7 }IIztPn[3߲ZO&| ^>-gIs1fKiRwlӓ덻.ahMY loN!@r r/=eTy] >xr5ҴpA5 ш0q^>EӦ~)*Fj DwY)Iw.ܱ!H~rl#`^@ y1~=Ols bL/_KiJ&f*cڹGAETkÄE5DTjP/T"Ə"-A(gypZ:?MDOE*3 -KE- lÏ`>%j+2YsCy Hv9- 'a(k\F^X*|`9pM9OkHq1lS‰" do'WuG Rld'gyל3QK4:MPLC#m/Rnp: fye  s>H L:Cֿf# PI-.q(EXl; vb8M !+fgo32q |M s!r^_O{*KrXGJS ڭv IJ~+?CgH6 h_9}qԘcՍ'NyR`D6oY,:jķc諦4Ux/B^۟vbc͵ D% rs6ˆt87a D7Bkqau"6CVUXt~WR46[|;HhdL~? B']_!"g/bM-Cw8nM%*O\$JGWWY$UoMCf;!R.(W{GVZ!u@@@Ϗ "0O PПB#}-=HQ Ճ~(DROC,CBt 胆q5f?B4~#}pc5EYѾBCSR8gx[ *j=){ì Ĩ]'Ewb/zmJԁc'J7˂%S]+\E>O?m0wf_g!&`s ^x`"i2(dKsJD]|}QO6u3|w:(%QYi~y>@@FwmnPfoV⭬\]$Ѿx4y0_q\ԓRѧ}u0!Qr% aȷJ[>myW})&J hu3!glQq r A߽kG?9\٩d)Uk-eLLw "u(Ȳ%;O( Yj +:L@HLDcG3֟ ?>z(W:tfފ 'RGOyj3A?t=t|-H$`%kW8alD2cRn:(deU ;?lD Tg#d/vx5;c=:RUL yaW 2Xd:,Ep4ec[ĭBVSt7wK$vW{{,j~r 7Q- Ky[X5%&Dp8. U9XЊI 29D K*lgkW ӓΐ]弙|o{J`jV78(/!ly32D:Ф`?-DyO-?6}$`u#20ԙ/d|k̿$0F A 4QT-㇔eO? WH` Vìs+CVl[ ~G!Ӄ٢'2g:vwʟ$ӅqcF٦5L3fhnC]MR>']x+j+5Cf}a4([2B o!| w•ubR|7Voq殨`v|IxQD~1`*\rL5.0y 6sM1afO?Q2).D#HAz T }eZ\wi gk]c+YK^my%0ac幍K׸^ ՞ɿMHyq PvLP۠a'9 K|=M_|xPU$߉D /0rT-?wvJ]!yӨN#)l\R'Ĭ%7 KbYj Ab()H,;ו>{Q)!/jńO"+y HpZm0ޏEOVXA79rsTyCk0)`_FGy(CȋBKr3BUDR;1 x;ZOĠ[AI\bnfQٯ(aŮl7V&}֢, GMp=.8I"QZ`K7*v5z{\>g2U& X;Ar*#)7sO1ڑ-}"^E* #ΘKY41٦𫸟r^p4\Џ"=nK*hR/p9ռ&CRb`u*VM즿5kZ+ԓQ6V pE=\u=u͙b NP1z@?cт@*\kҴ #+ #dt\|(ś._M-:^W^z 6RӆmjKZJ\fR-m4?E?oXx\DdF7.rK }I}|e0'žf-o݁jϬT+xt2xjV7֍SҞ)@+!n"،G cu*' l_Tb 5Dt70 jm1&l]* {L@ ^ߞ{]OBɋsGuŏSvezwJ% QVadXԇTq\Ƞ^yG+iC( yg U6U`hݯ+1/ W*&-̸9ww E33RI]SPfFӫuci/cXΞ=`½FY4eؙ]$FjZߪ 3PiitOa@L9c,y2 % s™iL N+ O4D2t,{mgP/ңMF!pl)>=QdWpg-G1gZ2@ ]4/O5|8R.BT њ9QTחPY>O'#G& sSUyOu\|P&Co sUV ?JU5ȑl#wi!ʕ <򉒔VBg;NzyxUAuھğ)sh{"0~)PE) '_C\.tߌNG $Jpei,H@ kM0``b<،_TsC2`4K<޾A;F׼e盳3G2oluFp=s?+۸o6KREvn{ m5a`WyM>mmIGR~%t`B5?k]l-EKҺ*+ G_ƷcQ427]GD( 7&C24/[L75|߃L+*tGc#*&w}S~a$FvZGUsdK91G m~,rJe\yFU&cJ Uz-W"rTjf>*((Y5ܖHf3 q9 5ZvKoY#m/ : o&%ɘ RF~Oٴz7!J 7([Th"xif)gʑ[T`g=H #Pbc`v s7눺:8v&%ӏI90{w_+mNi^Pf~V?:l:4eڱ+:4~qV K35-hlqjXf tN/q|碘guN'p0=ߗGSnYc[4xN>.&A:oxi1o>v3}%zZRw Dݣ/?w|V,Eu}q]YľĦE*kecu ,sxV<=g׎\c}~~-BqEeaʷ L`JѽXȭVre\5WeFÄQ+5:kh@7n)s)"}o]Dna Wj!=GaQ0:R#:և !ݑeY * %Z?y³Ev.^;ּm=+SջЏ0Nnš!$@e!&i\TNU5,AC)اZQҋPzOcA o3k%m%R.M( rb2,+ѳxJ@XI=csƏ*i U"R%J3N&+_iE0 qTO0Wƥ'&Eg":djPt90CLU2cőm!h> 5p% ^ǀ* YJPCrYEEGtXwnSX)Mӳpez}" JYHk}(>;6P:.#wS3&u#- ”؈f1 \OENut-B7jr G d/Em}}Rypo)v֒pbwuPm\q4_0~DM` }˩R LS E֛$ⅳNi-WAVb984q_ℌ NB<`fNRl 6m ꀉ˗wΒS?6J_ d'`䯡QNr $;Ayb8!Wb6q=:Ex΁2+9g) 8Irq )1A/6IC7@Dplg'1ڽJ3ReC-n!y썛4abG)ckZ {)+vJ(VǴǘ`ՂE, DrrdQ*Me;fArfЩZ3-9[xK_i5|lU"]륩ͧ˕﷣޶Ks씒dF% ۅҶǽ~uF x5xa=ݻ:(+xSݸTGe i,Bה&)]6}=Nz*E&`3pC 0i~k@AAt5@#qrIESSй'-ttפZf^,ϠHVI!XyrN'kćC=K#5hETʲ^ө4708NI)ԺW9A'JQB( 3v@2$3R `YE]Xq 2!ophI ޞ 46xu.-#coB!~euu.ȟ۷%IM\([Ei0}1txyF}?N7XMo5=r$фOz4HΑ}-К 0? |t]CAm 3yearm-!/+)OΟ )O~x^8?R.Sp_hJc_G1Ǯ+1^?orS^W+}®mKgqE4;C{ *Bg׈pV`@9we M93nEVʌHcM]a'CVj,6-|_\8Mʈϰ 9L}n%YNNsT4 WQr^͔of6$v]ޥ =%f^pB m`) uDVR`QC3 J:dYK{# )0htxY LL1f<}הx/pE~\/Qkm@uVC=N٬V[d%=ɸxUl^!>$/q"ʹgjN:GȀY0(;/{bVؘ2}i 4k֯\OB: 8DNk&bUc\8!bdp'ilPY jkf +,+T0a&m+D{28MbVCۣ$D"B;.^CjoU!-eާ$v*ot1遁 Gͩ9ºd+AA^ v3Mh٠w+|%P| U4@E v7MץN0خIYv(f8\50/XjL)pYE r:3D-Mj]⥎Q1wKsĔ1"4}$!-z} EVߧDDJGk]? '23q47>a%# LХnځPKS$S?N(RDD=je VܨLfE\H1g`Oyls}2ZŪd߂ F MʂWJ``pm~,kB_2l1o l`HuLω[BP$O 8r ;k1Ų! Y |߼W&b\^ioz(uZTcY1V%Ӄ@u㸗xh?#'|W -/g!c?X뻩heD0&MGKj a&ǺЫz]Dڐ 2` 1xߔ:;8ͣܓ 5j!uyWc(cEEODV3C!Ŧa&giC GuKfl #3%Ξ_`)7{BÚ%(vֶ}/>mF\'oЃ;$lkc_:x#iK_"=]Ȏ"#+Be7:"1N{=e&tg+fħFɞmH]`3M\@םтܼv)9jbaRhw z}|+,&FM9R|H:\3+|є/x{I#;\"ĞJ!7xBnw-x;\ݔꂦsO%#QTؿxuC;tM$JHlsEԧʴ %c~>D#i"v}_ TF[g(SW4XSƙCL@BT|=xnTic NlmHjӇLHM4 E~3˗3h#JgU5;z ;푆J^'Dyݺa%5WY}'1sAޖMCpJr٠_o;S׀De HNd(*tmˁx#j'6Z٫p/D ABetV3.zkT;z%{s3_[\k" 9O筜 s k얕1OMobW$u({vy[ð^w w"`kY %ʓ+9')}Dɑp8ULA%VjӢm$?99M_7w(]W/@teuzv̑BqVj6Os]I$qܑ҆3!qTD]e{A؁mBVܧbeGlIY</zۀB-I mޘRlyB v?khfr?i][BH^GNHO}BKذ}9Wppha4$n!>,_t=g3lc|}g1/rV<1X{+ .QA ~AVK n>QaGdyWLw/!gG { ~-(֐_5ڧ}Y׿T=|o$'!xNVVϺI; `ށVGڔh67x> f8GKm͸9rm:vjCv5<޼>%nyoߤ*5io!^$cp(A,l]1jJ13q̟Hq-:ʆoKx)<5'`>>a2 3`{6=Oླྀ$Pq+gfQXpQ΀FgDa" <6ŝ&RJE5sDw-L0=`dB>".j\ i\hx? g\#>K11i-lUr)' ibO^ %|xgaO~jЦ'QWbO#gT u9*hȩCzt n,cՓ_hOumẩ]|BSw7ԅ 2k,h_[!|3B&5+!B0:s(dUT'ٶՑpCX$Igx؄¸C,'r:_~ zsXT+67o Nl$҇[\ Vk3U<g0~E*"!Ϫ8^$Y9Lj*:Y$*vvk[H]{fH/Ԑ3_H Z Uz`8A!)o7K9771[mv-L~dds8n@~)KQI55d~=4_R"`KՑM@x=)VSJ] MPAywiS6dySw)f.smXRs nN$.}vf.Y ,*iӈBYG0 Gs~j&Bs)gVGxx-껎HW 9:|]}~Vf+7=2#]aW~kK3j _a:r«y,Jė#0W3P< OYEB@E&sdWbd.MX]ґ+7 Pŀ:zǜ> 7to]A)uX! lwJZ?򫩯5k{=$vk3(r2%k*Bf콌įO0wRf`Q+'hd#tP@կZ5հ^<=b$}p=DOR a\u@%yU 9P&e\$Dzv)004y4%_EJ5*wV&K+{pr_D 3H,& ?ԓjD%gAt u(U慚'<X\ +a,Ih==S$S=#`"j~C.BIA {J/77^Eƃ0E;f+%:8㦶ؚJnXZxk _<~\ tܠ+N*כ+5(XK (,A/&v؅ׇtWh|vύ%-ZsCVjU9?y`TDh)y?XٟhƬ  |Oӂ+NEN ydHK9R=.b$ P:m7[J?.د {^|"<,se" 7dR` N{iǟc-Jlf9W"଍[oFJK7b 5@wMۙS'axw'' p}px$KG7G߿%ɅX;k^^ q4ݺ X佟Y,/HO 2`-upNi+d}7Q>^m/T`yNDzҽXԆRS, N@=!ͱG[b`GYKYJt_Uґn+$acBvjh:̤.nsF$ȕ(*㱸ڜ4li>} x-vqm\L6ýK+3A[A<8NZN"nRM8'׉pN7s{[cL@"®n З,euWQ=\L;"nE)ޑq: \p8Hͦ:-\]b<(_jE(gBWRy(,F܍d:3$5ܣN'Nis&ex`3` ʽ N .tJoKyOtD W]8qcXB#If"@Dg唼~YLeC[!_TI_x8ٯ^*Җ >cICCA 05*"C8vѹ-N8h8Uq mEݝ$kw'rq< }$b3$P<V`=PSI6-&ʥޒls=\q3Pq[P/F%|&бdm?Y7+-z'0_B!wƀI6{ ЙVPt)<ű[[p362fwsmxa޹fCpa,3Zᕕs#.ɡ:_ 56RyJOܢ4Z"cg>3$Zbgqg}JPI|cYkHɷ΂l_0_RmԨ>~BC#|.&R ;<_+m X_7fȢ1:/|#9h[~7y;_?u!Ќ"#U͉a&HwLLQum徱_11[RE_x47}#5#8e;aZC6 gc3\ZpTw#b;^ 0 w >;o3mDr8ۖ#`[l\toD7t sZI Kd`HI6f8ſLsL ^9{#4u#ůq p8,7$3TlZ&rkTZQ1SU8oay"1嵹hej:FojYv+J'b*}p8vWeO4pJ ]zőxEFnqϸWq9ZaLhލo ^cj])y oYlJwy&%Zޗo I v5֒sd]4)14wBp*|<:׵H; rF3fX:U;;cL3x/ܻfn {^XS">[_D-l[鰿~oҝm9yxh. e8]Yq`0'&o":ǿ~~GCh !Y T[̽x3sɍMhKm^Ӯ֗ ʒ)P7qm_OgIO=,ai"d2mU0׼DeU2dm/UGm$CɆ㤷l!$6|°&NDBn qloHu._ޫ@3Ź=Z }1sdYCza.y >\(!1FWnabw'OWnEox"ҙ"dꄶJ%Q՗^phDۿ'W{+<(Y[Y MKqt`RV@4")ЈD[ uU5܁jN?϶yz喈UA:LHXYnFȵxJe֖.3Dw[Fˣu:YsDHxˆ'~{_/lQC-Ka"O}?G|Hs1I^5B\]g',T] B} 2k9iw |vu"c`w<NܐKkv][Ĉ٭P-֌2M i˼֑'  0e_0jZZkq$ pK_-Mw]%,LT֑:R"߈(hq+30jvHIJ8MSO-#Kd~R{2)· vu%Sղ?Y+#Mdd.JmbM.=aR'2 Nż_D4ScVL<(9ɼU_ g!$aM /1@ËǢG5bv^Gap;TU_wXSvh7fF'biP/Ÿm8Lg_ Eow7bO TP6εZeUGn%:KaѶɣ߱iDZC(o/(!WP!O.CQ(M+Ogtd{T6TjJШ$mPF49aX*Lz萷DoLY'-ۯ/[)`>EK^#U耜 Z9˹\F4p z*;X2iZ'&JFtGSn76['go|bawAicn&:2wv~tPXvA^nd0QuG;֙ՠ.6M>%82M"#*BtmDUY v2Mtl0^-VRU *]ktSTl er*6o I辣p!G:MMc jl- >h&Pw7(zɁe;՘C5|OsÌ@*2;u!Pd5bq@99SJtHV\Q/z:Gg @Ju񉤊 ` ܣ=GYR4'X/yu&|hre0ׯ R[^=(Ye4 u5C+ٖC3L0WJ&#$ 2+CPA5j]+q1Qk`ݬʜ4i%:Dm F$GT'BK5v=Y= 8-Aߙ(CI-{y {yFϭi!.*5r.OV]=g{˓/ s@ Os7ʼny|Nl `3b(V i@e5fŠJt ( #>4vIUyrkھt!"T1Xd u֗?qYc|rVh6TNcTZ"t%v icHP@=.& zia^apN{'([PJg`BdKbG/N!g~s'cδv3W;U \|J޻2{ysZaL)f/pfZ=`ozlEw&VwZ@>\tj%Uhsؤ]6 c?W{RYI`/BABCn? (_n>m/`6CZnD.;^1.(܊MRcd0&N|Z -0:@eMF_4| JP(5{~I'Sᯢ;?EdQ>ʔϼ+Aͨ}0x^#rɴ=!8Qd>y'ۣ[Q{`$ CォYQR-]AE$`pwj;|T.| ^ZdŀK5@m΁4=*y^􃬣 +:\n-I]2pKQ~$bʩJa2fd.ʫ{"Z('7H˓ؾd43ЎaM=;,z:Csn$7"(a~@Uxwfd %S4V3ґ)?RiRt؁u m>p!C33΀͟dwb\7Kd`+W/1Lq]ڣۃȏ(zb-b߿>fPW$hv~)1Jn: ;p㯵^ &c߲@I/te̻P_ft}o6|s`ڱAY>bydqn.K+rq :CMW6R3.՜ ` Mb*LNʏmqۂ2P 1$Lvbz\.kʟ_I%$]G vR. ZL~S>0Tq@@9rÝYLjqH6c-CZ{B`|Y)utKPXV5ŷ[/%VX5T2c1|Z:_NL[4Xέe "dZr.),.܏2ΈՕ3l ^O^՚`Eai<&7΀r>^cF3`PקD<";8&^DS38oNj!JE@0F`b=K^}JBwDqH"hLPzis P}84q"^Hqo?xD _fQw,S(Hh_xny*;QJ_;b\*=eY1fCH7M i5]-o-D~F22Z67'i6yS\{+vUߌd ^t\cZ;uqmkn ֚^1!X9M㩑d=Z bʐ FY{.햭kTWSXQ1gxM/ ۭ|]{vX "̊ա>:[5KN=u "ڄ+vެabع9늛qM+8j,;WOŒBT6L7)ki8gw~M?.@=WD4.C\:/!iOd;{MhDD 3HɏG8tZXa =]\vh說H ut%/y`PoEZ3֥C2T-2S@,Bu&,Adcbhs﫷HlVsm $T 3Gx/*fxb.0]l9sLIv wtŸ8-VK$~JAx=# ~NvE~g"2%ɐtW nX"VAv ] 8E[,{W?42EdyInwer:ʊLZ?3=w8A@AG2-H7F]}Il?zb;%I#> xuߔ|Ns&[VTlO' ZoM4+:V$D_a^6+NC}\!zD:9%3jBN7 <ˏCo!ۛ??L)is)/go*iC2NYhy!_QxVwIh^qƨ7 S{ q/4"SCzjJ+ Um7OCR7E`&M__b*qR bh YӷtUFP.n -uM5װdcP ̄R3śv}oBo[>H+Xrmzf6tkG:)N5K 7j's;b':؍e㪜:a|r)YR0h geS^Xx oVa N$LYXT:56&xHZ-H{em gז&Z(Oo_SўH8<ϣ˸Sɲ Rѧm0p4F=֠Dg$WIzŜC+;@fn\Es!DƿȞGX>9#=\%%pޭ;YίAl.O{ɪݵWnu%31Hk7_K4D$Òܣ~ cSb0[*aS^_x@)u,z6V&!$k*iPHۭD*p#3"3h=f[p.Ă{V&O!9/VPRڂiSL h9p8:QžH" Ztl , &ռX[ ~7g,\EO6WY۸s|a2hUX38w&{K\G1pPR+WsDYvyDh5_[<'ƀAQ[jXv OhZ>0ePmR}톃o?6l{3F*LL]0lbDpFT_#|Ti;oC#iNזQ7d49#.8zlǚ.dN-v-TpbnpvJwqC URRVtSHzw#ZFcN5X~0*jB_}͞~o푳N۴ي};-{Nfbw(jݸ l٩PpW{GMR'd\:hU*XyFgn5z^uBI|XOؽ *O~縡 Ifw?lXULP+M"xl dhv /q)Y>YuK[aN~?L'fJs?a;`203XEvt VғF_∬[=J.~7[-O=D h<9)*:΢xD{hT .o3oNiO+kh?oì9k=U#3pXԫ WM4,ٍ; PڲTKr~S[}u[jCg9J_ň8nEăr^?DMI\M=z7ߴ_!(̢g%!un4>V: OgaHMXyn>x+Ni0MY#5UU`t8/^onWr@jDe_Pvu kݎÀ; eJLܴf0fJ΅FjF.K'~%t7ZluXjZ":`BSsuoTNؑR~+Ij`XG2 9%~&wxVH%&r`8'U]Y]Bz顟8~ SQU7Y`y?RW UH p@b%ԈkgC.(.rXMj8aĪ*8i8B/%j;͍$@:,g# u@7 n6~׬Jk󙜒iT; IT>)(^^ÎD63m`.@sZ^o%ifVI:U5ľ'BVqmȹg+@]qLn*a{ Yq$/UEA8rCTrc6F) e};\ORNx`O9eɾ?E'xM+85ڣ>o"=ǧ@(ы4i*M6%-fVAp4^;?k^RE,hdK$QUG6qRa.NH.MA%sF-Ǡ}䴵-._DRWPHS;q:t$r "Ŧ> sN{ݰtF8$Y U)e٦Tgd lTfQ:NWfeZѿepآ+X_ZI% \=ծxy`!%=%"k5SZIom-nY7YHX"pN%dYw7Lآ&Ҹ+9"L4?H H f='H.e!C{߫o ƫNӓϋS׃=XǮ9n( k"ߧ0:m/)rƝ?n,¦QDz?V^%)YneUgHq>5$B^ާ,F~_.es rs~#i+;+o^a?A5dCJ_b UfS9B cJ{jK#"&m}rQض{]O6E=|t<إu/,odW&>1#Si[Ws =?#A !͕4]DW;maϽ?Bqq=%qDb)E&^,8)VxӜN3LĨH%QNJuoPvʳlnp׏tyi$fpD_#.咫*QXT]l\"\ ]Yy6Rp9FhgcQ񖆘`VCyjC=;zݷ RJֽ_qi٪j`$ExE*Gzܝg)ö$Qe6!xR3ޜB?|S'MҼC#HRI7cZ<=رXw" pf~g]-.X}&fA_$IޟA=1N_3$Dy+'h Ko=4ա-BD!? )N{21Juy=:BQ|Zh7*,] 0'rwF8~(/Hbբ?QxXhz0Xԇh1Z*&.ŹsɿL*黦ůʥ D@^px'H~ybLOGz7i%8v}!lɺ=O{]3V?5A5ZpKd>e<o+NcWG[ 9 Jb#Nϩ[BkC 8B(G6 wL{D*#VZv%iMiݫh#Ts\ˌ b3(\\Y(_@_WB>`GCۜ4نrR?$`Qn4CW`~5_ohΛTX(ӽr (y 𼝳0 5S@!'C=!˾.{U 'UIt1dɑϭp( M!酼ãZ2s7 ˣxEְti*m5 VtzSoq<.#$BK[*? 3|ۈ2}4Fz8^ bc"SȔ6ce{&ݯg"7&PXkHF)mN5-\k<k9ӄl*hk3 ˳1d8i*BnUA3t5V?{+<8-R"ﱸt ȴfqoɨ 8b,׌ n+˅.J Qד.ܳS`"K%4:U?-s˙z< {%"F$D)r;cEWII4'8[uqUgR!Q&F<( 2|IMuR?'I*ld"_'o@=훋۠ME ur% Ώ Dk$q70W Vc! A)t%\ⱘyqj pfWzh+3NjĀk7(xQ>,[tjgN412Ap9&n|6WDx5Un^t뱬Szq&.& ZİVӜFd,V`0*|Qr-s}!^N)m鴱v'y}YLuBh$`:mO}!?vΐ-nM{\~.O{qLr^c_$3r1/#R/LL5aYLV/ޘŰ^˨zeS?~ ʂL$Y)`Jn& |+#ZOUP|#L3lT1M pqK8/5+V [_O/ ޔFN -RY8Y^5nx>zS֗!,n9@щKγb;S=8]2^n 4gPCwXW5g8m(V,#l,㩇} QBh#Q|g!2bxu_`˛:-xB*utR[Vo[C7r]*!nx#9 M /.q,chUDl<[Cs7asB-ҒatȌ+*؋I7u03]-8]z'"%y#{]D(#τс0D]=!p]bzK7d/"5!mfyR8*m' DDVؐ)/eC#c)@~4"JLFU 6s/-?I)f ޫ)nRy(=Rlq/g%8>4CHpfPikrG09y%]Vw|4Ŷx)8CRZ*;L%h ;;ג[+;BUy

SGddfȥ8%9#?sH/ϧ>N*飃Wb'<bg"xlo FTvԻ>I\^$寝M5f^#&UIR&ހ_wftmWG鵬;<ֺZ1[ .(Nh6m7i؞PU[9/I3&/@랻&'(E8^g\y[q9Gtβr/nM J|Ċ.L/~jZ{ ,4L_#~Sdg"%XIek,[33$٫ֺy3ѫ[X˱8EU݌Lmz]sERp,Y)(2<gN.v#8p8?C%hE=c&Ԙt<sF),iXR`Q0C뒛Q`Q?bx! ha$;:);d? _ rb6k4%]M71L*h}GBTAv2,-ϝ!/ )=. 5~mZk9)([za`N4/%af2ؒ=TR.YzKyJe޲喱q`b^?!f9KA&Z7Lu[>&\Co"LD,raDUU³VPos>Z O;e+TJ1#>kpB,^[رǁQ+Fn'r fCmQzU\\5%F#OIӅYQ.E:9dă*1oWqifGXOR}h#6! Ae" SSDy7+΀YJe~/ZlX?cWwL(jJ6䔏p鵊EVTT8I(*YmGM+aDō,Z|Yɶ*)2c"XH@jT(.֥UC)>ODZq+*8`6qQd\D(Wd͈]530;܋23gn=!0%.,iVv aExG9@c s;tS|Db{:Ft<c[pKҐOY%&|Дy$ Wu.tNI@!"1@ 8Gu!'d*uQf`XT(iL* y9dI_s#?-= WT=s0;Aڇfrn90—H[q]uQU.\ 0 λa# TatpWwBtqYcxgaיg-7z#c;:%-"-B銓W{],KqEJ5?vH5E ҮV!Kء(,-{<9c6E6$̉9jh4t_4\|J|<(@nDKۆWw mX#gkJ`*oʼnz'mneӰ:00WfVxr/s&k7'inN vǕr9R |P` 9wH]D8Њ4}QVwc͐ޔ2294s\/D`d$-q;WB{%̜,g7!t(oIg)mO['!Y]`IQ ylxΘ`Ft < RЋ|i" Cdߙr{p +%5e"S5UgwY&50BXaQˍ!zM_Nங cF<F{W !SdcLwWL.7'bx}Iږ| , }B%U"ٶ#mcEfY"׻Gޫ=YjiQJqp'0"lT΄tL15`ZVo-{ry+zä#",5}ͨج+-nΨ֓Kq%"z9C=0fq+ q,dJ譻gJTg Y9`Y3mZS5 o O8h4loh}.zVTб=ZlٻW!wI!pobL|.oуzӯ V7rXY;V󵇉. r̀PgFaͰdv7f-6"nh) `3=VѾM,hÎ R]$7VO[`PvgeOPF`J>}t?MŃt7X|Ͱ/|u+e JbE^&ߦx/;`uW0iDV_a-LUTInX{ D kŘٌԟ @.n5c[iaeKKl#\* IKܘs᩵=?#\DĞzk7Xue56h׀(e=L/ҫ:$Dͬ; { 4 \ǣΆ:c@S#Pw1E's -ƎwIgUnN\ݸ|Kum$p}>QUwXXDTEqJ%dW5dT$fHo &~#Vi$V< 0%Z =>~6,ey< N.UyԜR' 39P\%{4J,EoW_ncHPa/D,_j A#pv i8N}_E4EKȿTyu{g*f8oI1_`;c J}3BԹnK5\_P*/:COxCa3*IfK6{0' hoU3Π0W>}$amoy̮7FoYahlpz߈ h$.jN;Habi>\X%88e"qJ+`FQB~<ʷ}Ru~t1x.Nvj6h<ӊs^AK/[t /z K\M]`t궰cqw>zLv \H_5i; .x:(Ax(8jK@FNJ 8 #J[~sl0,a>\)1M(J ҷ(^l݁$hC: }|,QiT8qqkrkZܱx24d:ƱVfM}o;~3 Eћ!G!Yў,AI0KL; :ǐSm vn"r8Ϥ_ m??e@kPÓ  rD'K(<ԗ= TYwq:I?'|{X%[Q+^ĸ}]o?+ej冚U0Z_{t(f)F!D{Yٺ Lt^~eɏ|?-RN1R$LB6>ƽҿV[bi#mqx[%"_`l9쯿m[hQdm"cAR"NYaP+}MNf CKKY9g[a5<ȧ@:[+Ϋ<0o^N/۟)_,;|:FwS̜3,SwiTkKݻT SV=CfܽAo]ͷ},BaBKT}4Ii]^D%# ,gI lPg7mX=Ey9#h.ZOr*k) 4^J+s,e,V0 ڀ$SV]vq؝J[LOE|Lz~P!̀MV9QTd]m8cG߆T&LQݭXctmwfBayfŢPӨS_/?Y7}hx|7p%HRRa7BŚ(dfSoڍ{QYy ; \u*yo'sq[^8}o៱&s7{f w㊄~gԅzm6"\/yW@H׹ʫ޽,*:>]Qk@Wd8gby(GCtAgg_3u>ZdSTR/# σC\r:y8cj({֩8-e| Moc׼nύ,gD 7owYy%)bpf?ƪpaC/亙rD\4gޚԠfψ= abom~")F5\Ӭ!bϢDʭ#5P(rk9M  L\&q>;u[K]"! d!nMv5maz F&Sí Z?aM;blؿS4v+ >Q -^bڅ1@'c>L!+'[#ŢnL;mƦuViY3wT.%z0wKS9Tj-19H<06yKqqFK%#c_f>T5^Z-<ps*hף)L&6Ok78yL}Cd"BcĿO%=@dJR;{1U)^jgndbخSun ΅й .o^u? 4;XTJb7mTݞSiȖĻ& uS"^_cz2$g =B`2oR**3ati]2)P u>WPcX7Op=t3]m  Ύ&d!" bSv>[]~r+9 >f8Jdg T5E I'ȃ[hifwYX!"~4 lxoR(|AjEv>bomt~ѸCF.^;ͤ=y_|ѵdS*Q *vPz{ YE6K5f5(eQݤm1rr'S$Լ {>1鿄Uykl__΀$) \Pe/ PfcPxc%a;E?םnͽ"@_:`]jI&; !#(kYebQMz"_U*yDi|oƹ:d#IG׳ "@{gÓĶcOLt{HB\v28&5 -rΒ4+&͎څ}8&uf={^\I؂FVäO/i#FeC ~deGSt@J19YjEunԿK&V+m O[t68'&ٶ ]mVFܐo_|.J^W#_xn'6yS7aV¸'aՀ@|?D+UCkEhNC?K?+Ykƃ"iEtsir`jYwhO do"%|.0[ |,p"0ţ'omv89\wr]gEڂT,D┻~;hb[z>!X)k7ݛa:_CO'Q#5^B)O>.;iמˠ 7q/c=4:5 1ۭ0c^CIy ^!(w5p?i&]- #9{DkIј}r))M5D Cl;9vuxlSڟ>uj?4,eߚvu{&`/]RTrg.(#,riRA./AOd.ք( wdWG9 j2[bB"*ǧ J ǛP<ʝiY;Af AgkM*naBbR`s$MBF];^ G5"!gX:YK4%-a唺[QhNJ]3Dw7ШJk8Knul!/QN@t6#ydWT|7'/L ;\֭ǁGf0v;re:A=%usN W9{@[Tд]ɥ@* J޾Id3ceVA0$QD=zbKd^x"lL>Gd4cX\er<{ֽJzWsg9>lݐ7!F3RhM܈4O5nnKhuxЈ7^[S-Zi;C81$2QK3ߘ)5m(zOl1 c{$C2ud)>Òp~52f(X> P+HeӶuOVZ ޚا,\EV8rؕw;}C[½|鸊0ɦf}يb۝\?P,)]`$ߘzNSD=KȈ/bCHX\ [׊:fAEQ#$3QI rY8"r¯Ш{؜АZo~Ɗ7UqX+z֗v.ÓCe%d$SkD190ۜ}Iх~'dM|7?sE:r\ш5azi'ɚ`h9:';#iqXuS7+o; D[*DWK:]r$ؕ^dx͓XzfDEFX2 $V ^da_8"V/LGH(OD/]GleTҸJ]P0>¹|OTQ_.* x Dn,Q]k(a7{TWF\[H@wR߀~p!<0-dEP2n-Pfm7]XL] A|ńl ewPkՆϥ&eu􀏸+s©4CZC9\i"챓tMԘ6ac_P[jYf,ofJqbΤNX=~h[J@v]CXְ SeWI,~[\938,z^C &0-zQwCA/;[oGj6}L;C?N\ȢOzAܺv(BCv^DJ6#Qc;lV_LyP@[g3_>QVH~0)̂|«Nzi&w;oLj!ew Mp_?'xw_Serc 6!Lwm/-CJCY[K"lx~ft!X0nqzFxg䴡;lr2QV +,^GN'F;5 ߍM+ 8eh5/;cW3SË Zl,*PR;6i)t5_rV|k0 'l^o;ƃU_!|Y`\MBvʃFL)ozw%-""+]P>7-}?#7P p y-mj@->~BȢ}ywK>=|q@0V׾:iP1E\uyn%o&)R4V>;([/]>u[Q ,r`ZgWbrDJ^5\J@mbZl`ґ]9%k }1LC]#ЅDAH-H_)]C-f1DncĩhSS& {3"Gake¸5|0|=Qq2PJe@ 8GO>iƍ'ج7%`B_o㌷Op1ʪ :PܓDdnPPZq  \E<7U۵%I8v "H b~ܗo;l|=(+JdL6Уw't} Zw)4 ee<3viېVJz]K%kWg#y%K#Vyxjrœ˕\O[+I྅Q-t/P'mQZ!h!僁b :g, )QNx@>AR/G='j@)MёrV|Z ){g- 'X}K6hs)#aMӮ:o\dueJpe*@=Zd@}>̢h.wSM۬7#w55tQ^k!c 2;{pu! C]Czm3teS5GUX'`+e>*V|I_WT0^ʭп{\Ec5Pf҂{Y+E.ԧwB;h*9vAS8w9u4€ /ݏ(q~%iث+*iUx//6I, Hl9m8EǩGՇ~W(Ov*ho|&G=p/Q0xgػFnTEɦ9+ehMXjњR~ e6flRx\o A|]}Zܴ0QR@u0~xhs!?=yV%D"^#п3}ޡKYp7g&/$~"z<dG/'YH9ir9ĶHgQұAĒ[$LbrĶ9Sd}2KV^E5 ڞI4Ғ61[J O1mūGL`WL 8)k ^Zb L'^y.4^ɽE9wT?o@V>m2vt脁,|4ݸHOW n@N,/CQast?tTf "I\[a5w H&Y(53 FIX\uC1P7A\/-}(2wRo C\hZ91xv%5\fquop{J aAU/׳ {'TgFY˗ȄXJ LX`!waDt@"ϷYG5G*YSVå6@6',*uk~ށg {†۱3Nc^kvWSs_~! N`:t~<b <BJu6y7`S?Oq&+_m~AN^Agpbw,+9 ^' _riAxm`~g/D4?ړJUV#]1u]܌v?\n:bԌOa_+: o ]%`Y %'34 Vw7]" PIUF 8`o/E`ڢךQN(&Vw. I=͎oG蔵sz~h-KeF "} 춳ѣFcj4%FA0C7S%qFLUކr\rRV9$e a*S"25p_ԨqU\VXh$؟d+N />\ tkD٦>*Qfrt'pJը;d%e# h"X`wpwB+]¡p7:9k]RnaЄu+*_5O TvVdQgXy W;7-#VB6IJ{"[.pI}vt}WBĴ0.+ '|v?^bapմN(m5]a OW/b\NKJBeNԫj.:8;L-}JgSn牊h77I8!^ќnR v]7)E؈t5vfLy~ئjRF2 _OIWl&' kvB~v dH "^ί.3Bue1?Yvr\R]fz :#2OWCEH͟F =߰:6狨dBGoUVH@2T#qfD1P ^֜2xteWcZY!:}-<qM JS 2G[Ҥi`$MM p/ [_Ћod`Cts^Qn+'NR.)`9B5&[~j6ߙX^æ==.ihjT 3Xyw(H\ ~gJ@qUгLtz'*⛎ddۉ[2pL(P]냙M^ g6Z<8{Y,]l OFHcnNҍ8eC駞6zA_3m3 FZNIs5(kl#BޙOD CW9rw?O`K WuO6L/zS#uxX Gi4ʸU_~ cl+9Tm'(H{vFj ̸xAͨ`Pa¸=֤ V"fDV;m9m7J!!*6AJ8 gCy NX96)}lǼMH2[J '2-lh,Fm Dh9"UG,z{tMW>buUeړ߱hݥmZKQ,'䘯?Q}Bw.~pvaX~.)n@`B]k0D/5nn`۝[4ݷc2@Lqv&p Mw4,<F+ΤDXmPo~j zTD( ,!XOd8x1t5*|P\ȃx{5<'ݎ&l0X+gqFrZL0b>L7(9TPz?(a\Iem):XšnCA/t/Ű皊kw8#xs [?K"`cv7⸳yhX nAۻFIgh}cx;pښXVD&X;-ݸzNT]Z/͊kU\=rl"М,:rL50_wt^^~vZXD# Dxu5sH qF|_/ \3+INrG/d]V6n%vQ>GsT4h)Kz$e-HHC~. e3ru٥By C޶-T[&orҾ\ԏìcHO뙐69s͠t5L~,U\&!+h" >=,O8. r*ly QOf0G[s$K{ؗ(/ƪ 1˨Q]E5-69Ԩ kQZVrB2mg?O>]FX͒wqcU$`ls}@ل81KSI8# =-ZDO !a./(?Py$f c>j22֠CqL-ܒp`SdQJ;ؠD;@S?1WŚ,r%ciu5 ժo/ V2Z9ˁV!2HV?S> ^3j n7ֹ"ܞUo'VXQ.~eHj ef o@UKϮ%7J>pBK-R^?Ł*{)v&f{OFt0jӥ1'E#J&JÙ\C,A '(.fJ=_>XFpBhkbV{rOvYK|%oDf. 'X'F7`%Or/EɃC?p!*364|/2oXԇdjڥP- ]I^?+Xc)LTm&m1QT=Fg~ Nh&kzz|{Bȴd3\˸H6͢F=Z"4h5 }aup-ӥ7l7`M$0<¡lfxprnTTz4z$AN9g2Dd& ձ^%5L[f>O@nLnRr"dN 8rO>Ao_K5RIu~/y'jtp rRWVt^Eb @aӴ8c#rjLyH NݛdCž}cBnD0ap{3 ƇP tyy4*E} ԛE d(L"ogo\m.W}N UFvrRuxtnCe.I絀Q 2P}Bh=MTZH3!Q{2K񥋺]-;'zfޣŎ݁ղmJz${(zH7ܸ# ^4bx8Z+Gvu+7vG5:ۈ e _l8J gΒl7tR2dI,Ȏ?bҒ4=W$b[±S ʉқXERC)wNNWDtZL^fĠ4!Q|1>c0Kɢ^oze|z3FM "A֐?X {(Ř ^0pD̗ i%>2vI51ipW[NpUgU!mUX[?ԟVF"4v`5Lrj}֋7buYq#t}VT%(dvomh7m+q-.5~'db;D՞]/)wbS)`շ}ͅH*i .^掰Ҍ(<dNC1h{f/"`8|lo*&ּ$yg_Dmẹ'~ܹWX&i(4 ?aU2-T7(e372Sƶ>PMK8Iu1y tYݠrki P2} -q AM2\ ZtmWL S` |Z촪YJzlvx qhkT<o zQH븘^@B%ŷiQћGVK~a=?G} q7LT !(ƾ4 b!?XhewxSl.M䶠|]?DxhqsP0b(6Dj<܂wdhQo+HjvecJӤiznQ"~SP_#{W8tSmn.O>_:$=P4 s8MsI/{0jVTjۺ1*Zn~,*sNPtJ_o |zуyQ %Yg(&*Gy˜Kq-pga1f>N.`T3|*$|.L32ɢDTzpc\S(Z]^Zp@K~dW1v N1O v)o w -VRT$OBL[}AxƱxE,)'iN~jbr,8wīC!J9KQRP0I$ |Tӌ$oJ{y (=Bmv3zW|־,oVRƗmNA) ܊|趧y>6)yfd'Cj XM;WjP#RЋtuqǝ7Z5LEY78(W_ͯ nui #> EpZ[} ϋi٭R츂\ԫm;/#̆_II.87s)QJɠn rcӭKbLLt+"Fq x]C3T }ϻFݭ0ֽx÷܃4lJ m&}f3/|L P=-޹HD[$mEC0|]T6烵RR2]aQOH/T1K 7xG0/m֌?rp73ҐQڲZ#FDK^B!"5Pb%(#` ^~[-֎AO m-z!&kccM:%ET=Db[EY}/O |Nㄲc fT-9"h^II-Y?"s a`8TTΈS<TÛ|߹s+FC̵~B:ףchP a 3ϖ_ߏ$>}+b4x5Ӷ)P܏PH- "5j1h]5rȌcY]ާ'(#+WzSpwyubfh5rԤϯLZ6Wr|N++;ç֛.0+׌HP%ՠ9B禡 7_l\ˍv8Î~6*DKLvّ8go)g|1nWcoK<`*K,d)odDRׇ \}CJdLग़F*OO|皨?$58!W~Mzn #Ms|&46Zan5pL;G49hGYЋJ_lM/e9:=yJR"k Up[GCڨZXt@ +NX63^Fz,vb]:|g68th}9U"^>/)ˎS.-y04Zx!SH =DEٚX ,(ne׎ >2lS̴>F3)?JlyOַgztW8s+XQ;ЪZ>${rR )th؂PaHma ЉGfEV)ڞ˫a*d3 1kj% !zO\B("Т?n ,ZH}?X? "~>, yV͗;g0'{En11B. Z'Ga_ N*b3݄`pldF{+EKu+=szGa g_ʛhg+vNAK`.Jߨ> CNz8Gm9 1Ξf8jޤ,tya&;J!UYu axج2>:Hϗv {VC6 :]`AZ|b@rʋYcyC ]믷Xh~vWU60U2~"u*ɀo4;&6?eъMu3Qhj(@T Ϣd6KnQ(hua,9^V GQ4؅Cٹ[_mP-$|%%p7SďYK^- Hn^`YEQ.*,0$`r녆.=7`i{S2A>p:LÏ?4.֔ay$O#8c#It. wv(*wY\̬Cdƀw1;t9B,kZd2}k) YS{MxTt*"/l*@Y#GF+b?Z5 WeZP 蘊\0ܢ̋%p2 ݴ\M6K'`tk9#Ge;>?'r /~-E9Xl'K5 AK'u 5z> }VpaA2mw`q"h| 9Ke+h xl˼tw^4n08B)^P$I,.* :w5R? ~':|~Kχ}gwÙf$EG)zFp,jb}rBC9\ C0#vͼ'{.,o?! GW ] ;Q9w @%t:&o"/qf2”>|ɴ~Ty"C].Zxs. NsQsrTĶggTs~8\e\ $|>;)Н>M.~`(l]>@RD%2϶)^`YAKٕՓjAI-R017P2od^^AH.kO׏V2Օ{ȬsV+Hx Wӵ~sjub.}vb;rbduhjU*#$A2ǗRyI =ê@QG.|gV$?bvMV#s3h1sJ))WifB˜0hpOO;+=kUd; ޾E+U!#@54ȶ>* U~7 ${l=pb3)h4߇8&O]{t d=Ri*!6Z|?MR) nGahcyIܧN VWɹ}μyF,Һ랜[C.HW=km,ģ@g\;w(nC)Ĕ@Nu'd؁yj?)Z+X{&|1^9;3V-cyD5U3P"}0,0cj0lI4Hnh9I #5lEb>0mݮnE>]<5pΜzH Op|RA1m7/ n!b+җ`ܓB!˲UPQiwd?ɞ 3yNCΗ _`c+ UAޟ쨅Y%A-M ]^dQ9,ZM5 E*}o355X-N҃EԬ=MExa,z99ӈ;Lux3|/F 2Q^FK~6 똭^z*lɸ d-|@h:e`]-Mq:G,Ӄbm#U?}ҩ|山ݔRV 0;;]]^շw⫘ϞDɧ| _jcKP'rKVf%^fA#f(E޾#Ce[<~M^6-a5˜~ b2U`+?sQm(FCi ťCF C=\ԥ@&]:Ƌ+̄f7156 ΀Sd4m#.iai=F sJwKut ]cJ`N"wHoo.Х'ֳr݌t;<}*[}"DtgB!ynrCF K'qMd=IUk,+ƫphbF c˅ ZA Qlfv"5GV3R( '$v[=R׷>"/$ϭ<<(-cC:w)-a" V\G-GŠFzr)qOes.2LJSsM"wϕ`5 %|MfFPEb02!×'JIm2R!v8k2 aQI 06ν^+qR%>b,Aq2>2) _ s Ɣx\44>UDt6a)VtO~P4ff vRݮZI]ڏE1;PÿHՊqn3n'6a8˓*ӰDQcY ߎ"$*`h:܌&#n1yny2w0DwWԠ$9ul44jvE0:+7!(4bky`"Ťqe땕S0#Y݌XV2m #(W^1!;cvk[(B"*-A޵뵅A5-䑘)W yb61(rfaAhl-u$Y8dzQ9N&%pځ122wz1!/Ybix(Rɵ5 Zc0[+(0A[kw=ds ;-1)g.?wvʺ!G<#1,j) Mx_Mcȁ+@)glP+.JKulN%`ƞV1ු~ K913^= dXt-?E+jw}|nT?6œ+:x==޿ghYSj+; q}9<"M?EfKH Ln,h%|| t`7BMeNHwTIM#k%JW'X9**ʦ2D[BC)Z",Tf,vW]3x<~NjçtA KQв>N9 F߮:-]wc$y^o[L6$ޠ*y{tsi-Qaޭ>~l]kkrCB&R(X H172@~Mȸ`'jAJa@¬7eTJ bZМqM s~ 㫧v; ]ⳍ̈%9"x#h=Ay<1ݚoU4VZ(sBe^I`Yqs{/?| ^ձ ֊#8 I-iFݖrځ}Y.W K!/L55^XWDG/ Yh34=Ddkk?a9!6&;:Εc/0躠(,]0I6r+4͏%訶~ ة,Īi\Pt)V'Lv1|mwyxKM`*+5UTѤ_/ ] $&D֎DS9 Av?jK0}"QL[ ߤN'j7zJŽ^u1OW ap:b0C֓ͦ[Ă)Jg>64XuVu x TWAߐ >l"d$&W `vch[ L_؃Y#Zgg=UrMw2,o\zDjVl**)i@tD1"`%ey;+68vUcEACM[ӊͽ\17%JT4ot@n+xs%#x`Jf5m_V#L#Õaqcuʇ%U#r\ZP4q1=R.R[|xFS_6׊tkrıȄ4#{_0`Gveqg=( !YʅC!TBTlv1pRPF&U!) wzc繅eLx%5/$ K =TxIQWeOiSG:hv#,:,iN>ϟ6H]6JWkʫ/jvoQOKv"1F!xZa*:SZ40PZsz_}R@MꞼqI] i+ˆYa( fCz]kh:= lTAW= Г~=vກfP :L)?%T?C )sR|ВyT> Q=3-I[N`ujΣ%C_R_z݈Q Sa6$C>CdEʰ3@q͸aG5IfJѣ$;gjH]O;~F7P`̦eM%ziג`.hOw&sE[DޏC^Yo . ;:)Ʊ[ߡD l̄ߩH:Zx3slDmې Ϟm^ƅ._eU/n V@ O,5D6;`sԐ'}Ffp8;b3 _=*^0zȼMY>! TraW}lUx5$pvO N3rZb_HXѼ>נ˻p,CK2\:0èT^8k%A*"ǰx)19&X~ tȘIn{rZnFND RfsIqH„Cad于Sl  $8r}E#MeC]/OXV%$.m f0K>;:.% ڞ-iaӒ2.w"ZT> +Uoje5 z} s& ~LMW2Z~s&fk E;bQ.J# onANc.QZ&:2V5B*ke,I4fpZ>Z9S >XӭAh;dfk5zcиqQ;:=!Z1%\,L yHhrsTg]1}ĉ@eqg G89( Sԣ00'֞%фL)!QB3b)/3|h$ Ϩ<%%<1M2q)d˖N6nF]Ix|Ub}%QߪH(F馸7P\f&4}%UNSoҩyJY6w|kC2]<{_4b;i^_Ɠu*z^`=B`:YSs5)*-~^UBٝowԾf#qg$U9V[:F60"wkt} 16׍cccFa7"{OWH+D~T"kyen=ـY? |ո<p)$=eciLt3ߨqd. B+N9w[Սv O#k'` ;@n}J~ c$@l1`MLXL,FJ_ZG``x*@{BD]imO Y5[yq_lr4燯<(8r},m^Cd[5n-y̻瞧}VLD8 L71A eA^oJ`YnuώG݄Ly9ff E-ɜźSIɎϧ0'(ۿL36|)k| ^HgRfߘǨbxpr* Pnws]Tl+kϰx?W kRn3'95 H$>ua ȁ20;"ͱ:AbHsc*}Q95~l J}e"7}l%ؤ;NTqO?SnH"[ޟ3{t`QdO1h:3ۢP%7Ҡy*^HSmj }YBTN .Xp|:oʓ4VŽ,p&\TfﺽM4PpbW{3Pnb8\67ϊnuZ#`ço#KDSAo$am2 36ã<ݿؿxG RNk - |@Fjf7yJğ5Kp TL6G$p񛤕bY0ixƉ7]ȟYg"< U$( zA+uDd-∁,0)l 0+k qJ*_ %6Ho&{@ Z!X#SUa֣+HDź~noq,sv$AΔ);y8;7+thPz:ƷḂԉn}JW +:)Wy -?yzTfHW8*Y ӌUl)P4x[|1%16*2$dՕN".7 侪1J,XeqwC|V6}[ybz!TCht6ZzRu<x喬O-.an:;3C[ J2Byb2S3tF 9t.sw-vKfwmiI#GU*:԰}7'q^w_>q+Rpw=KvRe-ڇ\mIxѵPi*&t]  irK2(]<'f db!-P1@i)[2quyq`x> 22;FqYo]r困Yqi z<V o'e$XL\rsgD#i /]ס#D p.j_tN#'(s܄EIt Ij$M+IT*=Y/dlgHgPrEDھ'u{ uag#+Q9_?~!YHd=Ly)Zք{Я,Ώo*=;dN\bWh;`cO&lK_W 1>sIT|~Č&ފ-(cqUU48hs(#j$ :^Z,ƈY*8Du+byI֢\J}ۿ) sC]}4 cjbl &bFsluͿHZHDy BS 1&58%izOhέ1'ՈBҵ\Sd`u5qRǡ_g٢%FԽKծ+U:ݖaD' {Ba Fl!/ 4Eˆ\HW(_V=y0f A{t٫xXk5,ŅuDuφM?.C __\ZbKe Nt٩*l«rW٩h_8ҡk<*$u![v7C~App#@Y1Rz"05I&"ēQ _UKpCZVq]S#FJpdMJK![~6HT?Z"۴^|x! ?&a3f{?!ׅ"r̢4\+5߻n T`+(V˃P@m)y&ѬWNNk++XYJ`R;#c[e4zrRY7w|w{?Z @ְpmɖ51mq>CCpЗ~1L ?L=m[ *q}Ukk:j*q.ص{^vwىqD9DQ04+j |FiL;fP6$_`6KU|N5}mxϙZU?, ]ܣY }1w5Aa*6<9ݻE5LokFݛǸlV23b~ڝдlwX Ky֡.ve`鰮>"}K56[J`2̿InC> @GWշ+0qc)zU؉irK \x՚mlaaAu}pr6l nïd@1 #Nz)zpm~&̬[_twj} LPr6镢]ub`W Ib|;&JlAZp\/۷=`uO>?J݆ P# 3Q qs%BJʻM[;a80s+&G)O4Ju\O5R<# [1U~7|?&ջA QhB`k2+M6OQ0S,G'8F1S =L]lY|'BF%lB;*oR\.Y%_APπj[I/"k'x QPF{ 5I}u&|tܭX62}[iR_J?Ήy^ͨ60J37 .ɗs'y+SIĝ%f hmsk9#}*bӉBbVyLH,*5UX * ?0 &Y$qw+sd[EqHt,)()T;8o0/4`"sG ^ -D<^v^HH=;r`Y'=>leZϵW] e/*ϐ6x)۫:F}@p0Ⱦzx dIR&`BDePΒR?\@<.m0%3r,0ׅjF#>;޺$WKD2\恝4x$U@ YG1dPTN?UićJd/*PCM0^IŸM%nfՐɐ)M,Y+P̮;Ea$73̞3(3ү"Ag㯿(:OHvovU"WMcy2n`+uWy37ׇ^:_OtuZa{;4@K_{8 yAx?a0ˆDx%o)eƙi}N+zYa,L2 &CE yDڽ%; S9gإ%zdXOmMؽÐ@1f)[KbZQ8\WQ UySPa(R]Ǧ6gM_*`h7`«QVp/kFwұ>;x ,n!9o.d4|"` oEl^^:p x/%zmuC(XD^b`Xu)HBd` @\P 4ѡJw"e*ʜx^ΎZfxДןƎ$Xn  Q^t,c|ZV!J8ƛZ gMͽ=qi#y~@XJJ~SQh!f:Rchጵ BR#lhAQ-Uځ_'ylgm6<$Skp+Ji@7+JEO`SϺ(ciH'O0=d5: -hG +ilrI߲,E e^{%d Vk}jD#-D-4?CIyOd$ftqzj0_"Q_}@oa")ugk1iw.\:~B-@$AV/,'y^p/t_5s (̅2k[6 N`FdRv׳'|..hn@ M[f|~Ϡ?-KFn)=LNe.ݦmz1 %v(, v'ix6w8o]c|C")AU ꈄ.-l)]B4mQanȕJS)ߌS|ʅA?M6_[Nmᖚϛ$[ \,2bypSTlac'xF@[S^xBߧʹFiOGњFBG6!$PQI\^^W,|3 j+Lڏ(XapsTqc@775q|WPqs'*͘p#|`Wƞ٣τƲw, l "hiᙽ!}303vkk N\ybyFr9b;I[3UR1-No`,_eӍj?z1V-K`b蘂yڎW~R)f /Cxm.Pwa !=e:j_ͤ:ꝋ@7bj A:}H綏86)73r߉veeǥ0<_ -ioȮ!HI"ϟf1Ps{z`2c=?kBj%{֌(l /4쫳709G`0*UOcHM>#Ό9lrvM?Ԙ*.d($Ԩ>mL{jrs}yA6KOcIU;E9ZBo_8<'Reť"ӷ gjXQeAI&66PJ"P/"`_Wm-Bf=aҚM dںNl󙫘CVR02G#LcE2f p,m+T zzGNJq>FDo,ZQK*ٖHjs,{{ٴW:B %/eX&NYɊPHRӎlӸ7-i|E" ?-XǢJ-)9tmO*H5B.a *ЉCJ2?IMW>| `ͦ.[5I?ZQ7({h{Sv\C)k$fi Wh59?EN}Oܔ:}Lr+@ f{Uz#5c-iQ?mBJnQKBe.=cs${id#ڱvHPjXtl1ȩ楡 %"E~TTYj`k9T%, B4` |g`on,buo ho؉gZ۰^s$|,:{c( ^"1bȗLnU^^;ou}GҪK1M{gBBє5eB0y=^2S& q0E0͆u(LeN,. H+M0"ZQ2WOi|kZg;J#5 h I/2\r 5,[A]$ q)x{Ho!Z$pBZ7c}7!iVP/hr_& 4-b AkV"ƽQeuC jTm-0ڗ0-Ou8ipfM!7No{w 2nɪ4qѓa{\cljolKarGU>ͮq΍*vƹF)wwx(_!ٰbWhJM.HXNlCKf .ԴS Q9xj?HM~A5!_֢0tUOww:+Tw]/kwPg] <75b_^ `QOz<@³},̖3H 56c5uFF6̜A~i>P7ht&WrF-Q'oFYpF;mW,W:9NWwBc;Κ&R rT^2K>iѿͲi%_=پ]A[=ǃ)~vsN] .xӿ<#/'Yn=9*`xbLoVi334`$|YʜYBk>\^P[bvHYQ^FͶl7]i(dZ(NW)*,YոZ5zdqe@gs͹{IO!oG#dTA\#1wU'dw5uc fooĻȸd1[Ֆm4Zmm;y=BJ#aD.ESyNp1'L44`RTEK2D~,@CYG+ycIk9CwM'T9{V(q~e9`h,d D!y.&4'xTvCdyX0)?\፰yyedE>dp( ~+ mxúMy2^W*40Od7pšZt1k/xU7^PO}-H-WչUgU׽v\еCO/J?7!)YaF 뚙OYPy]mHKk_ˌzca_J-TIg[> `^šJ;R$U dqo2Q2.,u[s~,9RS U7ב$Wx:8R4@ 5jt^FP8MJUcfT 61nORn&BjT;;SɺYӾKzT@c?fbWOA Vv҅ | W+2Vrw5'TIH+$to9OsK! JVjo\ <#Pf.߽_zpxh1?}l'Ÿk6WzL0~/!5y" |N? v\툐 ~S!GMp1$B캠 r]rOP'5Wr %^Eh0qK\}E0!Zf'')SHu=DeOo3Nm;~!pIVEƲW"\`ݦYesmeLF'mM$ (4$u|B}<|:Y(2'%?[<<7ݑ.Ds/} Śx). Äh p~@VVFD%Rxh\#U,=K1o_@9)3>oly$J3Z,+dg `>Btq\ 4,/":dsf gtit]EQ0s'@}}09ϽX! ARߣŢI¬/p.Dm̀%<>AKS"7!rf*h7уz/=Q:du7Y)QتHC/( 7OyΝdd0 vk= LsB~q&lƚYw*׀$WρI.;xOUjzП۩ rwdB^jXSd0ɅFD-͟abBM !uA̾f'9*i"xy4ߴ!pRX@V78.W}FPgF:R1P;L޹ (LD"1{=V^dq0jNXķZ<С_T(HpK0ܩi$ek1,:pZfeWYM+5TLB]6V)\\UܿSdrbz$f!i*w,Q*'^e^j7.)uOX| }$/n}T!OQi(W{2Miką:ixh<6 NB0ZVu S6AdkH#2%İmfdD b!bRcKvk90>yx$ OL ."o1׷>R(E|~n+N=xtW# u=-\b ў~k6st:! - ,T$v7)2M_0Lk~\|.w >"}w4}=*$H@%~9Wr(8>2Qe/MO9+`wvMC#)3 f߉~hz}f!M4U̍؉A(,2`x+SC#wc +S=k*pM QW,P&I8mZⴊԂܐ=ŽM~yؒF6B\ u s{!b(dW 6%ʛg&b~$Bۛ ,Ls-p#(uN೅Rm Ӛq5७лs9\+=9dg*װ!_}+|$LJmsE(?%WPW#n gXjjOFd`Z-CrZaOۃPMq|uǦM6_ iCXYY->]ef(gsDŦ@<+?/s` ~??2c bY:P_W-o/f4\҈QJ2w[ 'Ą6\bdlBR3?IsT7#G/7 2SH &J֖9*PnwudXؕgǥg ldav'J>t%|nCb pqcLF D/mwqN"8-oAװÂi3+4ܧ=S`JT;PkQjdS;LʍN0Ԓuɽ+.9 [W v([I&.#Gׅ3q}„J>iRDO/b _|&dmYrf8'a_W67'>E,iKnǦ)z߸VhNz|aхIOY38/`1 g.kPJ3}Hza11Wӂ϶qqjbo_͜h o( Uf}H9A9K 2]]&\g50xm'3VLj@O\YPBКvNU._Lol:V kz9=Y]V]-=Ϊ.YXn`mcXb_z$>"/sag\^ƸC#opNyZ˝ĈUN @'E:?: $.,!vlkX7}.Z rgKv~q,w~exVDH>} E*(cӣuI_ 禶rprL]{i5# u$(ҭuW5AVG\/ͬvEEsJ.P #/l`B%Y,vp:5 FMJM{005S @I0W%!z :DEXgH yUK&a%ud8G=[ Y\]}Ssu} I;&G(g2Y8$<;Z)}}K7jv.CpXE_ek|ui7Wkr-ObwiC2J$xZqb&5|zvP=|bCzjTf"[؃5rCJ:6PT1)Rb N1v"=EW! K-0PGܢoW?V5U:\ }4.NtOjY9]uũ1oDv]3kJN!fa_*E䰵[iVJ6289~H@c_SDd$'vo+1Q~]Z)FCzug#~?It: YZ