sssd-ipa-2.9.2-1.el8 >  He(A U]r:䥤T7a5Ȑr%DƇX!P0ځ}[}Po1:T>Is#> M{@Gdėm!7^Բ.J`Y3g"UϘ$턚C!\JqY{!$u]i1'y;c1Қ;U!t8!# oi=%r@N88J@pk dmɒլ3Zd d }wHa~EK!AæYm[_lN@pM{eȡ@/=j /6̫JW\=Muoj%55պ~ ;@FF2֬V"? QXdl;K^pGL@ zSỜkv#LpHcL}-M4=D˚thu5Nʕĸ<ٖA[,: icVbu~ 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(A U]%I&hArDT.hƦ\4:]8:~Pf& -_uKYX>$:/d$.MJq* S͝&u=Hm#WGs"R6~I7M4Q䥔A 90,v!i4*_"Of5&[sQҿ8D,QjEAF)uNv77AN`D?d   4 17? . L   4 TGpGGhlq(89H:h=GHI8XPY\\x]^bdefltu@v|wx y\ICsssd-ipa2.9.21.el8The IPA back end of the SSSDProvides the IPA back end that the SSSD can utilize to fetch identity data from and authenticate against an IPA server.daarch64-02.stream.rdu2.redhat.com "CentOSCentOSGPLv3+builder@centos.orgApplications/Systemhttps://github.com/SSSD/sssdlinuxaarch64getent group sssd >/dev/null || groupadd -r sssd getent passwd sssd >/dev/null || useradd -r -g sssd -d / -s /sbin/nologin -c "User for sssd" sssd(* K"( (AAAA큤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../../../../usr/lib64/sssd/libsss_ipa.so../../../../usr/libexec/sssd/selinux_childrootrootrootrootrootrootrootrootrootrootrootrootrootrootsssdrootrootrootrootrootrootsssdrootrootrootrootrootrootrootsssdsssd-2.9.2-1.el8.src.rpmlibsss_ipa.so()(64bit)sssd-ipasssd-ipa(aarch-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ /bin/shld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libbasicobjects.so.0()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.28)(64bit)libcollection.so.4()(64bit)libcom_err.so.2()(64bit)libcrypto.so.1.1()(64bit)libdbus-1.so.3()(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libini_config.so.5()(64bit)libipa_hbac(aarch-64)libipa_hbac.so.0()(64bit)libipa_hbac.so.0(IPA_HBAC_0.0.1)(64bit)libipa_hbac.so.0(IPA_HBAC_0.1.0)(64bit)libk5crypto.so.3()(64bit)libkeyutils.so.1()(64bit)libkrb5.so.3()(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-standard.so.0()(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libpcre2-8.so.0()(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libref_array.so.1()(64bit)librt.so.1()(64bit)libsamba-util.so.0()(64bit)libselinux.so.1()(64bit)libsemanage.so.1()(64bit)libsemanage.so.1(LIBSEMANAGE_1.0)(64bit)libsss_cert.so()(64bit)libsss_certmaplibsss_certmap.so.0()(64bit)libsss_child.so()(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_idmaplibsss_idmap.so.0()(64bit)libsss_idmap.so.0(SSS_IDMAP_0.4)(64bit)libsss_krb5_common.so()(64bit)libsss_ldap_common.so()(64bit)libsss_semanage.so()(64bit)libsss_util.so()(64bit)libsystemd.so.0()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libunistring.so.2()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)samba-client-libsshadow-utilssssd-commonsssd-common-pacsssd-krb5-common2.9.2-1.el82.9.2-1.el82.9.2-1.el83.0.4-14.6.0-14.0-15.2-14.18.6-1.el82.9.2-1.el82.9.2-1.el82.9.2-1.el8sssd1.10.0-8.beta24.14.3d@dd@du@doMdbc&@cR@c|c_cc@bbγba@baZ@a6aɪa@aKa@`.`@`[` @`&m`@`x@__@_@_#___[@_?@_-B@_@_@^@^@^^(@^oj@^ku^Y^S^J@^C^0"@^0"@^0"@^@^@^@]f@]f@] @] @]+]]Y]Y]|@]o@]k]k]Y=]Y=]Y=]Y=]Y=]M`@]M`@]M`@]D%]D%]D%]9]9]]]@]@\\`@\]o@\\\\\\\@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.9.2-1Alexey Tikhonov - 2.9.1-2Alexey Tikhonov - 2.9.1-1Alexey Tikhonov - 2.9.0-4Alexey Tikhonov - 2.9.0-3Alexey Tikhonov - 2.9.0-1Alexey Tikhonov - 2.8.2-2Alexey Tikhonov - 2.8.2-1Alexey Tikhonov - 2.8.1-1Alexey Tikhonov - 2.7.3-5Alexey Tikhonov - 2.7.3-4Alexey Tikhonov - 2.7.3-3Alexey Tikhonov - 2.7.3-2Alexey Tikhonov - 2.7.3-1Alexey Tikhonov - 2.7.2-1Alexey Tikhonov - 2.7.0-2Alexey Tikhonov - 2.6.2-3Alexey Tikhonov - 2.6.2-2Alexey Tikhonov - 2.6.2-1Alexey Tikhonov - 2.6.1-2Alexey Tikhonov - 2.6.1-1Alexey Tikhonov - 2.5.2-2Alexey Tikhonov - 2.5.2-1Alexey Tikhonov - 2.5.1-2Alexey Tikhonov - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)- Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true'- Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2101489 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed) - Resolves: rhbz#2143925 - kinit switches KCM away from the newly issued ticket - Resolves: rhbz#2151403 - AD user is not found on IPA client after upgrading to RHEL8.7 - Resolves: rhbz#2164805 - man page entry should make clear that a nested group needs a name - Resolves: rhbz#2170484 - Unable to lookup AD user from child domain (or "make filtering of the domains more configurable") - Resolves: rhbz#2180981 - sss allows extraneous @ characters prefixed to username #- Resolves: rhbz#2149091 - Update to sssd-2.7.3-4.el8_7.1.x86_64 resulted in "Request to sssd failed. Device or resource busy"- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2136701 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level. - Resolves: rhbz#2139760 - [sssd] RHEL 8.8 Tier 0 Localization - Resolves: rhbz#2139865 - Analyzer: Optimize and remove duplicate messages in verbose list - Resolves: rhbz#2142795 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged - Resolves: rhbz#2144491 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around - Resolves: rhbz#2150357 - Smart Card auth does not work with p11_uri (with-smartcard-required)- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2144581 - [RFE] provide dbus method to find users by attr - Resolves: rhbz#2144579 - sssd timezone issues sudonotafter - Resolves: rhbz#2144519 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file - Resolves: rhbz#2127822 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) - Resolves: rhbz#2111393 - authenticating against external IdP services okta (native app) with OAuth client secret failed- Related: rhbz#2132051 - Rebase Samba to the the latest 4.17.x release Rebuild against Samba rebase.- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8 - Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured - Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases - Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs - Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets - Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file - Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6 - Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf - Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP - Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect - Resolves: rhbz#2098617 - Harden kerberos ticket validation - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options) - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file. - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2 - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname() - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol - Resolves: rhbz#2087745 - 2FA prompting setting ineffective - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon). - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Rebuild due to rhbz#2013596 - Rebase Samba to the the latest 4.15.x release- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces) - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True' - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication. - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8] - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber` - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code)/bin/sh esrusvuk2.9.2-1.el82.9.2-1.el8 .build-id76058ab5c4ee625ddf57bbaa4b166357464315559bc82c07ded5edacb40fe7f67fdccbbf56d872d3libsss_ipa.soselinux_childsssd-ipaCOPYINGsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzkeytabs/usr/lib//usr/lib/.build-id//usr/lib/.build-id/76//usr/lib/.build-id/9b//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ipa//usr/share/man/es/man5//usr/share/man/man5//usr/share/man/ru/man5//usr/share/man/sv/man5//usr/share/man/uk/man5//var/lib/sss/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protectioncpioxz2aarch64-redhat-linux-gnudirectoryELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=76058ab5c4ee625ddf57bbaa4b16635746431555, strippedsetuid ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 3.7.0, BuildID[sha1]=9bc82c07ded5edacb40fe7f67fdccbbf56d872d3, strippedASCII texttroff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)88PRRRRRRRR;RR R8R1RRRRR%R3RRR+R2RRRRR5R$R!RR R&R9R R RR#RR)R-R R,R:R RR({YVW/KbVE Y%\I*\u))-h2O~{\ЧYT˧S47Rtȉ9** h_]FQ|B5D?[h!MzeMYYFt]Z'i+9ǚ}rFҲPFiMe7S,v5zqQH,ŝD> Q!@mt#nrn1j\KDuA\ڎ=c*.ЧՑ1ǾG2h}P"xg=q Dw:d8'N000?QLRb&E;ދR89\HÁ_J@9~E.' (--ʜTG~X-2b0ŭOXWHESaj$P`)D42,%TG [}CRwJD &( b5dV2tMc`5̇,%gJ819? C򃅛aUA]car @mDcq9GPxrVu)XUeB?r ͂uz ky.ؗt;rn>wLH" gJ#h m :wwbPr1q4 [oDHw= "2{C _KWҌoΠdo} L~AB ^箣ᗅI]u)&j5oj6h`I4hZBWPSȻ%9e:hK]/((ȕg'YΓhN-j_xbJp+JOU'M2 @ 4E YWkKmMŒmGܛ|}E~ch"VKMQ3T KF NbG_98wʄ-Hn\3jmRzb74օeZU?^Us -e74x(5gD (-mw۟5DsAIz5Uק (V]S)*X3NYdGZeX8aAgz`htE.2"L167ku>!ypZkYGW]e#F*J*]\20n@L%QJ/% C.Dֱ'T%W2\ô}d3BFqwQACsc'%t[ҭHM ] \e!o6|oV>XQ65ڞ ߋ0M]h -Ds@ڼ,hc={REfF/ PGS\hYfd˨EGgKs]b~͢+Q9SVs{%##' @qUfBx{ClH\h\IǼfmLܰAHT1(7+r#?ȞK9r V P %tB}e/g-ԅ`]hP1 dБe_Fݖy󷃼| 9iqĺ(ˊ^xqiP?UoRMFZ%sౢ% Jb6§cBdձ dቺX1"%BB6oҕ'ild)͎o<>F7ЗܕiZul&AZp Űn j%+xSSrsЅYAEa@GoFKT8`@?਀8O8&.6j/8GɈ( 7[~Bo, EpISeG>z.,.PԪa.""4zsM兲q ;y'-[~7[+yM^x\;t Z @mNfAh'瀊P7Ğ9JIc'Go$L}$Lr;όQGco5BKWV.~KeQ6^e)>:T_5w1}ڒK:{݆f|=L~jId3H˰EP?ds Ek 0eK9() k|{дRvߧ`W2/,/jiu{ayrEN ɜ%>^1>S |5}ˀ8$`MUĿ0^ZפH~^ȴGD.~%h\?!]˄S/ĉEvQ$TW V>\Yb,xfwo]r 'ܻc)z&kuLNHɗrޒfE u<摒aRt)_yKȬ,5cW:VSnc`LJ`g?SȊXA+~4l>H`ޛw'"KLwldAji$Pp<*H^̶w3mCҒzk9/ { qΗ6"W蠒J0)x`vlx! fR8O/#V+1e I.َ^.z8"n H.,YbIk-L\Ox]I%)Ʀ–k~&S5QJ{OVzi,<~9RFpQke$ܐ ( j9-woex_91Y%Ÿdk-8 Dm_Ma¼eTb#H-'EŦk]"C彞p)MUلNkਫ!:|cü+B<ί^,Aّd~×e1Svƾ Wq;bcc7S_ ɂn~KOx~8+57` vA<0'Ywfv."(Vf0{RfId>Kҧ ~ <@/nFזji}4a>I.v~{dQlYql(ly(%=+)&ҙҳuG ,0~ څ-vG^,=] Ka6#}\'k^sW,sߩ|SQ[B4?cbF# LVF2PMBI~ymQ@44/@ZQL3P Q:RyhMJ- ^-^zC_bJɣFnQ2TTSGTUѻ뜛EShzcOWj( l^dK$jU$/AS:#H=M'$-ꦙq8rm.dsi6>Ńąw8wav{z)2~S;l.+oJ~GcGG2,Ta*a. ;t;L]lb?8ꆙNtƮߗTh]HR4dՔO0KJ]{]ί'd7%K$oF6L%0}HNyNvF*T:nד~\i@m﮴(:)8:nay wL#h _ݵ_th` hЇOLC\<#)?bBJDրGYH ^U6 r4BL,ixc:6U@ۢ|Rb$*eC dBf(ѢtUrr-46k@ux.}G.UX J=r6#<<Vi@&Wl"dRRq뷵сuM/~~BW*kQ:3P Ror',T9=JkS'BSlP#n- `"LLhU2 ~gHɂM X/FDJD6ͥ kGQs-Ԁj͋3kYiZԇ;bv$.طKᕞKe0PTI E3 פ.)%\ohL^|´*9"IF\(QUS4SEo)3sBc Ve4܌Z Zpޛ?J 6}8G+|)4~ty6ȋұRG_ost榮TQwssۻ2t76SeTw^ngAO) :%b)Cۖ'MLåtY)xlW:\Ԉ&1Wb#~{afV8cMίϤ9*z7M2g =S[nqp`r5 L8,|q/j4-ϲ?R+e^R91pmfI"+.6prE,3eZD̯U@qnv!Ҝw`qTԾeTDv)-b(Ack`pgNkD 3,p[A2(# RQ]ZJtG},ߞ F!IkGUK[U Myu>Hÿy^ݬŤv7!{o <,XfP@HߣOFK<"v|o[+{iK h fK;:ծӕT /9J}"s-Y)-|7OljNI̲3\G浀7:(G<:kC0ur>ݥ툿*dYxo20X'7XM`Y?vcOw'ֹ^?``yj|&-'MYlO7Wh1RQAo2QBqV/<ćh4yP@]4 |b_ 6J{ ,LQ1§Da^?iԠe mi:~`72tN?haJ{Rڷ<6Zwo>7 ƥ.xBΎe@xRY (bw%: Xʣ  ?b:f3vy6ϊớ=pX @^Zj}v6?DOFΜ GI3l"9rEUseUwJ_To39f@pA"OL2F׳SH&ЖgCn s`e jX (mL5? u-'Úr0ܬ$M"4\?zA ̏_D2[4~(3l`ޯMJ__6{2m'e4\ |B6.SEg |K+fj"xpqMAf F< m:REoLGwE g R~T83%b3lM!$F~Y?DĀMhбвf/4}W+C[ aƱw]`(I0R xv碝dְ9y M3>j`p&PdCyFʯ7;X)ًGiN) !ǂy T14S PD-kqA`IggxDq굁SWFNUȇo+_UKO"]RI8H}LPBjoj ؚNX#g̦dFc!R &L芎\z .z|p'kV>d6!{xk56k-fWcR~|l)GbZY+tJKKrbe'sJ !ۗ&̿aNQv{^jLl=(G2pCNբQ%-[L/ f'.;9/QM1 "n>{1G-fB98?{S'zQ{g)wC½q?'+Uص@,oDd/u>G n2ְۣ-1B>k ?Dֽ;ʺ!i۲± d<"Tʀȑ 'l< 7"]v>W1SZ1?2gY8-^8dQtUb“!GW uW_5}<NӢCH5DnYpeLቈA|Œ_cvg0@Y\;DC"V1dE}Z!M8ߖ\YR2 @ف$M W*U 0[Ajpƍx ڠ2%A`ؠK +B 91๾ud?wu潴F~p'' QӮ[XEpN(#G4tI߈]} 8+:3q)f8׵֟2,9tΐck!B&>mSM89rوlGWt?آü_?tB3pS*z}.~?/L c\Ehj9u*JW9_Ql|$0υqPp]=_n0+E)gT$MTߢC8g Alaǥ.fW,s%>Ug]}RoԊ fnKa; ,Y M%1x~{dJ-_\y$oǺhzr*WD3nI١"gPT=pj1Wbڤ*@%=uJ5}#BC:K36mI ?~L98b6']d#04!?2w_A[,'Nl{'O %\6;ƶ/)iϩb& ]TXTuӖc$UʜШ/$)^faX`\i$51 =;5mֺDAgJ`$"rD 24yz"2=v/)|ۯVJbcԲʔ%Ctk?@v̫<W@z׹[@7pEVQ{7J_Y1]8k#3H4O%g|~qHeZ\` λ a2_A󆪭-jN_2a$jմ66q }sZͯ#Y@wTUUk nTcKtRzKg2"0u6-Ǹ^-%+DMg _..9 ξW joT 6W6v($L(J^9|Ek *SKaڿ88Ixgk0/QMmCօ5#rCvK{Re1Է+^CNZـb-fY2]+ &2 Ř( eϣʦEy`^|h ۪"` !9#I6Qh'v22 dGڳC)3׶K9XOkusi:?l+.;O{^!þ?~^`^jWuUP:@c޵IM3bʸtIfeS+~$ؔg88ek(2m?!yBZ<3@ Je>( ~ ֊ј.;d| DUA-4 @v @9C+{!ֈoe=fxv|ߗa,\w6%D$~iv15kuY@}U_&w'p1`ri$?hty]7œTxrCy4EȪhO,PO, ;f/ƲFV&$#Vsj@ܐ1,Ȑ)!>d:l۬jJTYm(Dlb$BɰJ2>caG?7s̨HSCPO+7I$>$Vئmޑr* .ݻխwÃ9i.Ֆ{ƶ~5t('#9`{Txff݌$]ȤUzeã4.`7T3mֽbA8K#qI§7[HaWd6mNj4.*gYDE@*!|zoߌY)-8!&@ϯ֍& ~o͓ 5)~Ɨq"eߋC RhSFPt#3#DСw%yHB~-Z+Ԧ"vi#Al{ڵKgEiW,]hص[}_ ŷ-E%۾M6q]1c, 5PP"xn.~ Dx(dA78OpcFc20mp5(uTaem 8~= Njj])|qz }͗{hMĉ/e&QȼnD7J w"kf/"H6FP݁ɉbxs+9R) YZrPVo鼢b?gwd9Z>!0H+DNyQQ` MFCqK -Ti¹Թqz|0^2$P9u:"Tg+Dyleƃ0}h6hNk17č̆dc:x&h.4vc<4>StI}vZ+ Uކi>\j{zhН缵qO06uOTj E;$Q+ b}vz^ O5k&@M&uhZ^eTV4^`ut( S8Jdzͥs4> owDw36hjȠ77!G|dWxqI8wnm7+hy2V޺[:2>2K!|;S M6qj^#^GU5IGgi;5m(2} \zC>m͌"lm(M_5h7QvK1&V?ݎmg^@ ڭ?v:&De``CrI S!?|Q|)IgX8apC\Le uuL?hcP49YRe,X@@e'w3,NWg ue-=4ר饿+Ʊxk~3A~QRsp ^(+qdWdH'-aR|[L6&2msyM+e5k[ҩ>UPh.N|@ *ŸwU׸Ht|i85@S.Զ/݃tU}:$ T$>KB< G:heE ˶~P<_ /HQLJt4\({Px.Xw :::hEU#S<bxXYDXf/icQ=G*Bc}mQt_q{UnxbKAUٽ8fZ+T/` Πq{OA.jɿ)6 hKEp{="J1ޟpIi N/11ꉼ%N2p$}jyWEW#)zs[JVQn߆JS.W[ ,<W / ;i m[~3І`u' fuUnTeU2T C1yIVIwT9A~J:FR% `]tWsz`(c_M$D\>uk F[dKA:Ajcvܐ=l[qCy[Eu3!|߉بt+@(cN0)2yľYV0m! /_vgBbtfCb/P%T AЗ_9H!7hqJiD^̃EX~l5̸8e'%QR!e#aC2] "WjMVSuԔg O`l#q:^7g;ub|GFg` () |ʎ^wK}vO|=,v:ĄD^ ΌvpE1 P85/LMo ͌ʔ|ԫv$/Ģ"gS-_Z*~U}wl *o.b&~@W6:oŕ<.Y+إs0V吹μKAfksR JK o=Ӵ o iL`z5D< ;#$S_*8X;F YtE~ˤY/" +qĸ(8 e>ye Yf<-/-lp@CәB*ٶy4'k e% `BOoe>W0FjJl{Tq|v:|>WTM/(2,0[ MCpE'W K1դȞ"tA`*D7CP\ sBkbo"p4xs'+]Ԝ)\f$T~cZ/7GA!}NU#jKFV:ɇ)oR>0'U/q^w6_Zi¬eP0'?D~ צ z?t5ʈDFq4t.h7u{΄ MV[y-I=UgCL q;GGx7ShKwz1A ăqJ#2SO~̌9=A)W-].O7IZD>+n`+z ?K$M+R}WEc)(,n}n+ׁb3{A8"  9ӹGcO 7CN`|5wvY\y}8 ,,[?tw)t(fW%*%PI7}K4l:SaǮ)~)+o$zI$h꿛'sŏeitEdV$$l:Gx'7]uXNJ$a[OxL'?pbE@u=I1msv{S H]aÂԫבy׺y5, fAzLVOw 6z:EpR;%s5sOe==ّ-Ap/h9JVI/s:#| 6{,BEfݡޤHJzS )S*EV۸wmixTch- I+49 2U#n{Dn~a@L mA d/27gv襐qD⤚qPgQH,!ov_vdV9>$VY˙'8iU?e%'tJ0sL kmHX'A:T"K;z=wfTa G щ_cI/[ ά m%鼽",~<|ֲ&X @rCU xcβ{C{sh_S- +֒6%R]YB 1or:G.x/$F)#eX,@uPLSz=iLF8S,lw!F w*(ZԿўyh&"V;_ڠOA=s{ª[dFh.q܃/+jJ c] 1 ~jz e uV?'Lo\(EH6z~Zv @H?V4`h<([m 6_lI;AGR2;=TI=6UC-mn=8KqnV9a>~[M7tl U;4ռ,iN|%a%O+V*!;c^HvN9LZ߸HiRc)Ugs%P1"s|HHܶmn>Z8H}Gj#&' 9Y[(n^{!ud%2Ș_d.|Kɮ,#hLp|<F"үDL~> "H<8 ?rzåP.$)DJ cY.Z/1$B&ˀl 5 Nǃ'sFWQ2u]JNJ7Md fڭkoIlpz-YxW&ƪř\`׆S bkn ༪[f.)tS _gV@9ٌRB'%I+,+ ''SX .MKt;Bo!KpMdT$ݽttrx"O2 L| lyPlvKp"Eo" pK%߷ɑV9\4j2hGF%}xKclm <8X g䤚F_*ֿ^'HU{7/P`g}2d`- z=9cG&g8_Otܓ'y䪫H2qvFu.H.Γ`3E$[|?ە:t~]33Jl9 ͺcrcȷM b"PmijT^e!2m`c@e}¦Q 7nYggH?Fk'gі\}NF%h~~]?!hsBϕ0WHjrI~u kh%_fC6/B{'Nc13(W=h];uF[p&X ˖\28<%pa7^'/ou-p^b73!"Rk>^_2=>llaqʬZ3)VSIc] XFGQ}?cx{ko <\/Fyb3DobG'sS2 x p\+{l"W!G>eO4{cͲ`e+ZO/Hb6 7j 4Z^[S)gqn1տno*aSu0=֌p`'__7jyD{o^4@Bɜ<81&yEQxmQ>o2 bZʈZ0.;lJYa^{WA]wxc';j(Zķ'zE #uKg5 ܾ ХxOFn9f14`+2Ȋ*h rn2دNgә48$.8wmF2ڏgGI4@ (QS CyZ$F ͶB$) -Z׀b6'V!f^/i|~shUa ${[J5h)m}\\lۢڵANNM+HfN6љUo$ĊMF،ؑХFsd,Β;$-(Գ$KЈt `Wp(V%k?_f sy=LN0stdj /ыg q8yd@օ zDWۿrGwx[yU=5ڮД5av`t*h;=As*ϨW. ,9 iϫH7QU2W1Xؼ NPcrJ{GQ.>}:ދ .ݱQw`1$@e;'A?iDbR2lw o\{2URIMa05{I0 tfݛE i qXMB4oXm\HVġ!Zn}=?'vdE6nEfʑӌ/~f)Ҳ%*{g)#W] t{;#؈Yq\\ix@;pi``(YLJM0Gɹq|(@}QT0y#i"%mG4Լܛ8zɾ_ᒰ䟚SZ[ndZoGVejImSξbTzײ5R1lv-p}SW~@ j@1S}1VˑMUHXlxJ3=v}V'Eۍ-XdlW4jhχ~el27"{g/]d2>< a̛`=El]SJ؋FNL5] B&_:4\s)L~E Db#N3`JÓ+6Ш]55Mj 'P[Y#4;erE fxPvϵ=H Ѷ GIp&~0C1wv荛Z gPaPcE;5nI/Ak |WĆ]E_Vkdd 5kO!@qM^[Ŷu+G a+U0Ѧn=ͷqm"A#e!Mz%[ g"vFqtC5icq@FZpT"q[6wj̀p=?~+A4qr翄tK6|ǣ .C Ea1a™SRL &j[l.-LDRxQ%!A1O_dkG7߯:ᘄ? #oM'0=NF@|1K,_f}jOw@,7ٕ&H#NMc.)RLӋ81wBA̙Y2V$*SJ?WYZr(^5=dqԘ!b$0ݳlެ"0ȦNg\ ]\ $v%tf !veV\prD9CZ4/<ݯxaAVIS+V^Q~\; ǩhJJTPqſܰ4qCɋ;`f)Nƹ r+YՉFet d isl5{B` ce8☶/Θ:V՝"璟AN[xN],ia.^,@d-E@0VbbvFXUNV )juХ8ꍳ@Ə_Xii?1[ avm>x Zѣ ^,=yH^QXYh($"Xϗo/Z06ohX ) m~ _B_D: b xEt ։Ҥу9i-:nb1YY(8r%+]S2pҤmC^>id";r7i{ 乕Ԁ>֝,bMJ‹L !oy01SYi2eU+ʀan P=g%ƮDA8K' 0^rb/Qݤ.oƸ>z~I03IGB<' I,E=m]]fu.ur[~FΟբ [kKm5^Sdm! Ki*[gl3>0WB:daxl`, -靹=E\`m˃Lg4v-x<ҵsg:J} Op !1aQ?S.i$I4(GEʸ%CC,_+pNj•j]J 2‚4&31P,eW_HT| Ӆjg;C  ?^e-ʕ&Ю+uC.ݐ? >n oU5X$ 6b)I^I D2 PXo暎w`I_vHuuM/b(pÀ:.qj~GP)7Dg(ޟz^Oj54rij>ݧYgTB/ԯIw#Y"-[=־p/9K2m?Wlk3{p{#!tט]3|~ F3#N*ŎJ F$m;A†u}f! yPr0o0퀃  -EwN0]e/H#U2#t`Q-)blKpqFMkdqǏZ7h1* ᒀi&fSi 6rԯOL{{ѼMPb#,F'H'Ԍ9hpHC#7֣cm׍bcޔfau$g`db|dMruR6b6\MegH'edsFD-v<go`hF4CO2•%f a^F87cދEh*?}*xn֡`g ^=D-LS$z[Dm.M(kX|'#- ɏpRUcx.4 6)L20xG6vzVz}oy ? J9堏 J{#,8@"G K 'aqt'漃B47du>oD6d/ M \ChZ|89/*"*#|_zZZ??q׆{35y[@$U[^K7^ㄸqU忄4M8)f#U&&SHPkG>`NQ8*G,v~tE}چ@/w8* ]5\ T0j}|wkdzK[^\ H`lt6sD `\O吗.d,1z[A1썂1&qԨrYEϪs3/ʳ0gAoJW'BhJ{\8j3W8~[yJE)ʔ8U Ԏ͎۶2+ag:=9<5|Dc=1n(~ߜocRg%Ԝr>֗x B Nt)^1;#9o;]G4p0uu]DXTLqGظv*Uiʔ~<׊ܔϠ ga߄}/jSYu~9ҶͰ5b%g&> 5r(_ ?w&"#tV7W[- Ϙ-ppT? NhduYОrŴbݖD ,q宜 u"6+a PJ0+9]׷5t5+IyF*,U;[`\ O7+fOx3j?.[E?[Ux%D"4i ^[z'#4>d{e79煔Pݖ>cǧy)- qipF̷?P!iQt*tVF$= d>=vGgXlj#\uu O 55HϷ8?!d]Jޫ5ajs,1){ : mcYYMr9Es&:4=sukcѬ'V6W8l85R =-qs' SW+KۺTX:woW(pyoi -s&H =?e?wך >^,b l$ӏ g2DA4(;H~a?keI\PU1- NJ[+7 MVj;qݯΙN(7Ih.叧O[b#8MpcXL &Njd܇$C dIwa!B& F@S)1A8+>9; f"ċAlK4}i.ݦn 6x$yŻ?W(ʝ0ќMpPg$IƴՑπ|S$D|V)䂇;&7C0V $BxD-j]ï^-NSnp8 $`ލm 7wQ!U|D L𼢔mYjLCqkrRHc)<ځH##(m[)TG&͒#!`m1#)kҳO$FmOQH](WHǢF aaYԻ3߲!yk 4C{Oˢ`H.ht޾?SXs~yI +{-kq=P-1UV%FJҔd"q&TOF]c~['i:QD23aqɺ=SzJ潓86XkǠ OcE>EpWشS\hNGyZfq@RFws[6ۤ R@OB2gA֞pۺ59qIWij3LکziFaǪڗ6Oݮ?op<_~ڶuB],6|chQśb|^_LD-H%WBӴH7vTBA_'Xrd@M=eU='#~BY6/79er>#xI+=%fȈ( جV!L"8@6r.s͛n 숬09rv@Bdž cHXΥjAWtB0s7 zD;f"cT}Z &qm{`;rI kL|ڴEH_jE2e^G_:||8LvWQإڊzˤ{-_Uh/[((Ziл̣|ж|lC5;Ħ\NcQ'Q`wo{HE\hc瞲0BmJh`OC,9A pwMad@Ez{shjng341//Vx(,c2d2ׁi?tW+Bo QeJ{/ .׏<길s,Vޟyp5!ZMK-xWsNH4q WKc%Lc7ZR$jtpW=] [3՗BZ3:pȊf˝?ɍ"t ,Ehhcq{İ4I" [ "v> g]{pdͧ+v:g/"@2/9 JbP՗?kwjz]u 9k4Sx%ytX{[PsiNB?QS;RYIsƸMUp^hXeJd*f-zU]cTG BV{XHe+GC~XH^9ͤ䚫,Wp/@o_xYȥ[W5 ={?"9~]ib3&?(&7RܑCot>Yz_0X?3n\iIZק~ iaG 6Mq.ƿCxl Kܡ 8-߭cqJcOLA\wp?ܳ h{$ҕ@49~ѥfa pjSdnEY pܻLjnj1tFSTs > qiҸa m xۺ UxZAߙo nڪ\T}9C<>y-!2l<=_\DG:m Us%P9ˋ+2%z.T3BGkQڲ/faA ZJ'zK0)9_4z@A{A'peJqk~՜*CB8qPXij;PvXI`e?5 vERD82ɣNLDUVd̵!À*PFh=;O%9&c[09IڗU g).&>p2¤^ 3' ǐ\2̼ITSz#J7=35n֖HD~^b_I]6 [eO¥RRJq%Gb$܇:C^bi(*TNjmD&sa!teJYZۄn yaޔ->CA]A;FtDeMŖa$B_x KAu'Yo)>cѦu.OHQG.56n74(}'zfH?ɾH;$=+_!=@C2ެkdo( pO~Qu46g%8鍮xs{ؓ' Cg_2`rGr9x[H);0+a6sVzbfI96gW @;WlѤa??` PK3LdႽ WΕk%JcTMĉ@ߏQdϿГJ(L|y氠-Oc69A«sd8l\Օk3&hFDBk$9R7h_o '̰b`1aOD&?d1%)6 a-0A񢏆!Y_'V2BS Y:JUX8Zӳ`3^C|^0[^lQ<jПkϛc4ջrmdO\(҈rJ!,)^sa3\rjf]G9;O[[t8YN!qpv0J).aaXw_sgycA'[4[ K x)^iSXf˟U\$ ܀̷Y(R7(mX УaűΕ nyo=.Z+Ve 6K =C$ ⌞50 `cI4(\OTtӟ,dRlwPyzIT?B$>cˌ脘bt%#[_k>] 0|D>KO`;8pY`Z+oEcטg҂Lwպi]#/;*) Bom >MB^|STsan t?i@Q Bڱ._#Nހ'"禥67E8dW 9ƅޏ_V,;T[Дh c8JH Fy5l)O{c/Sb@ۇi8~n**Ѵ2iƣ?$Y@ h'AxE-e7~b@\v@CKނvi.:58{wU }T4Cj]fv/K]0 Hܐd*xݢ3Nϑu2/E!5PCT]l<E ~lW| hL,;LoQ=%;jp-xiMN/x<5g^ט4,˒+wv, a(=[}ڗ0KfVɈKn^x+5Y7="XPȓ7I@U#0lm@|,Q$ġMJ﯁=rOhp&MabC3lwG]J>ER7]5p=ʂǣ$YW[%|nvzhO혺42Xr,X) OW1IyO;+"h@Rr9x)#2t _^vFDFEP'͘܉4lT1ږ8!7GKHK|.xg_cUΎ\ud/sdE"[%Ӝ% ~GZ &vv4 VP,* {kic4s̢{5' g $͠nږIc'B Wi]7|:~jRBCc}nf4X\6e sUҢ$f!i0oxf趪%[eKȜ) Ue6-sܳLx6 ͯOٵO쏫j8;r{Tk8`wd$2#&;]u5 _Hg<>BWS\tK,2xCkϩ̝(ϡ }V(h^kn4~'O LHC(SpZ>LS4zoΝQҞ!k+9Om3`-,s"v{m"c KcG9&~=ԳKuૄJ!aV3[2v+ qH^aG4v=_*?enM/\0R,v>/_+i͡iEH"`iF/4( wЫ@bTxDLL^J3pG;LFfVI(7"C"Qj :쓸ǔ]BKM:~$BqoX0ǝ2rYC>bC/TԪ!dj;s }m7Qƽn;f؄NNUwyl*j4dA9q)T Xe{|V5xITS]<zԖSIv=#yW@09/G˦M7sXtMaG|<~Mmr UHU{pw55/rlX(ؖM\ZIUxCTAv3󃰣(pȝ@>qIw)#x:IRCƒU{]Aק:Y*j}v%ޒM6E%~K^1m\%0a?g3W|৆RD>/9䗦Q+Z ߐ9O8 4 J&|bSbĆL4L1GʒMTm`i g9 Uq|Պוпfᴼ\ Bv1a)3"Di?Y_,j - 2JkՋ`vH"5{NI$yN/KI'6r}cM /"Pgai afK*0x^CpKHymYV1q9v})`4JLJ.fz0ۼw!q>bsɩ34]L-wJ×".w!"~yty[c+i,vQIgEٝV\? ,ހȉܝxn_%_,S e2C/6#<9,]1`>x1+~6>Z`Gy[Y-L=y5Kt mmqN?Jfazݧ!\LJikRh%=y]t˒F ͋NG >nL \ywʘa1ٯ>_|@mL͓PWn@o[Wg]gK*(K~]l%|kٯK/&$t<]zca"Q۷E7/1˟l/dDLbe,X|ych/ݺ/iAUog8=u@ZtK݄XXr#`on67}Q/[ 837wӠLp^ Zєœ '5+4OASqz`yZ^WBnuϴP^ a׀cA?9U998mC(W?LVhi-—&[䑴쏼6{n>yV谏NgKz^sڻ =͕Oð?2(4ՊvGSC=Z0ʹP0$Y n3d@ 腦 0cŪ<\|Ulī% ͼDG< H)eeEWViUVXdԄ x@'Z?.Zً%_oI$?A5_G|bДd>k&oOiVUTFǹV85 KՔa݉{]jn{?`Z+3tllw1ss+ Vd{r{(zn$+y,3~ zj0#X^9W/uZ*dy|`,فz++bCQr;/LjYbm)Lr$xKiВLu9ZrINV[t73v!@QAGJy7'VMVσH(+[drV490hX &LeJVx|aD% ?5XzmtWyqب~ іǙ .v:5}N``竺[h?-w2}jp~ j}0G)^$JD3P|zO#ItUș@ozRo j4hW. XB5 N#of(Wc?Pɮ(vǠDFukrX _9xRKȜQ~UDaK^bD|燫p,)ao",GZ+jwQ2lv4RQ+TR|50`3m۶kcC]A1{Q,:x/ `1,LgEL~e4 4*&bQ{7خ ` ?/U܂9.UKW2MS%F3Xhw]l3!NzXmh* &f6ٟ' 4/!^iG2J+T;O首3ImQ8@+0)L!<<'<ѫ(@AH?P}])VW2혲)nGTKzBK*݀tF 2>1iҀ xszY3V٨:*0R$/FyΥ; `*9M?8tַyH8{r{k[PFt;R.j,XM.Ќxy "̳#=N=cX*\iB:}:k1yC.:pl D}y8B7w 6l ȏ67g2:}fc2r6KbZUFI۶cS@7' Χ}*¦4a׀ TeQa#>Q# [3UiudS`c4| j=ѕ*lQ,-T_M0!t]HFC:=FS dI~b~b{] fd%@o%f%DՎhn$sQ xs 3=`*!+߈u҈`ܓ]bVٴd/%GR`a8EMr/X,qA'pވDdK~T)VwƲգ <9]aW}e \[ϱ1(r!2IVɠmAAFSYiϣQ.R١HM֖:1k5hL8~}챨4hxm]-nI Y!@o9| jo|HAiX̪Fl5EjcdiDhw:'DQӆ*GkCս ),Cg^IХ-ใHY# j9 )oSp:s _:^߫hqU)XyȀ9&p<)1MSHH:@;p|i;\LDEuwqmv\HZ1U!0-޸9uFM3OJ,jF4gZa1ւX;[!3(5gK$l_7d!v^<0>n97[kllQ\=/G(np<[9YvًpbA_ukMhǴþ*·IO-NTHhmQRq v|-qUxmQvjhE=fR3\*EF)8MM롒?u/r;D%L%Ȣ's&Kg-?Ut2.'}& @%(zQ 1 7ӳ 'S>;GIj,zY(a rDg;_-9 tS-_v7E.x)Z 8~$X:rwʵI0y{4^ԪDsAc"U MIg~eOdZ~OCZkEӴ8-FCPc3lfK&G1JLR ܍N>;MJB1T!r?DHƝ|_|N 𑉱d|wվf0*mW!^'C-YW)7R D]hG+zӢ+@Xg H+d'_2Tdks. sS˲?{ɷ RO ӷb92>D}_2e`t&x%(Š#GS6(Ϛ 4)19m g":I9,`ۓ;O',>ԭ kP bc8ٚ]č7ů,(iRQ\6묎lPwz;dcHTƭn* Dib  + y$OIXs_:5>5OFxF箍k3=*pt/~-KqOB`~pKWaK W%F{pZuJf9;x~oz@:Zf < 9Z/ iڄÛvõ&KoZY! i^tGuS!ff>3Wk6̐9Z=}BX-d?,D9e@j&u)h(iZJZʠ<6B1:)GF%6Vdj3ur~aI!'qycR21(U^k!=|訊+ Ӡ}.zXJn)Qk#[p}oFQбt uv/ɓϣdTJG/]_iJxjQ%{(*THGY*s3{nCHu(v¥ ]^+yNkܸ.h P/0+'6! P9 PqdquݛsڭlfkD8j+˺6GH[U} iV;\$ֽ -EEo}S ċ >ay $C8Mp@\1Q*I۸\˓Cl-GWd1 @B/G?*%,) *nv:gQwd?8+igohkw%ŒjҢT.!Mߨz {Ykp9s X*ռR!=ODs'W8˙&f];(Li#[Z-;&9񷜾x_R;a\UJw<ɕ鞜:ف nv)PB;NE'F1%* Nۣ9!Ll CDΤҦ\ZSS30 ;mx5z6}FH@R|rԍnj@,, 2}3Cp#.p+[/ؠgmTܽոbw{o"K[U"°ߥr.?U\_MW9-1\TJ:r7)>O֤^wR(\5?٭ Ç~w: )qɆVklyt?8 iŧ|g^[QA) :TL s*d9|-I%v)}6XWzz8 t+^S`a4ug_xoQKa؟߆RgJP˪ov.&w,@?@o?1 Mg \G5U>n\2T5^u}9S VaK&6JEAw)+~tpCaf aͷQ,d"Oz>!Tz'-?7UAQaKcA+q3P\TKe&Q7GBuDٱn;˖)B"b;OƻwQ?AXG+)d[<6?{m?R!" kzC+VD^$MY742ds΀6iKrb>VԺکҁca,nAyA$18Niѷ>:g17i$VJ ߋL~ +fծSʩg ӰP:G7QD#i^@Ruq'mzS,Li/L|`2UIxتj#\90! UCqEM^~ sQ|;+mMnI,\#`]LdwV|#hR!8UÊe:GkdKKIqf0&m ;|Ep+a2S+[fj`I o7_v;X NȰ܁YE3aln%Dc[AqD彾aN_Vt U L [hf>t,=A`H?hۇu 87HMѕX{1|ch}]8-Zy2EDuUE7a ?v:ypEVWu(lOyy\B:]N/VݲfP4QX,7Ny>%ߦo{+TMDnUR:PJ+ ٶՙs"͒sDEy?!;ecW26 qai;f8nu/+NMb! DR?RvTʆrȄjb`@Qy"+-X$nH\ ! LӏKey*5¢}ֱksϜP+|lNRaS9vn$ JH\d'9C;e:ؑyM]f u@oD$a⬻\COlO*?#ĊmuU&}TuYi_'M&zx!M"zL,R[7!Tq," b̭FDD3ȶB~~ i+El+.7M6!pAH#9pԱ![;%nlGxy@cV`?"xف2`<X)i4' ѴNq'봧@$!Be Q껑:<-_@w͛Q' &%ȂV#)G-+~W|yL[zϠ_h03|S2 ,(lPPʁccf-&`ʹeƹ;UQ鰱ȬkEe }V$/iO\01ɐ 5+`DI\./;OHi5AJ915#NlI+^$[J~gS]P5z%9oɊ`D n\ U`وκ:"酔6\p O to%cid҅C_rkiLe5>=SNmIx]8k1iIz#y.֩zZ8]N4`;#⾮'t&ԝE$ڗ;I 7o]lCf l7#]sMĴ^?M{Wc%V7/ԝLOE9I/4y)~ýr9=@Ӻ(]+M9 /֪VH<$T'F?W|[F~m-;S8qgf \T!IIR-뿚!z(<1r8dt*`I=:lȅFi,j9䬹D@h/-N-$0)"5yNn5p9'`1wf¬94)Gdr2a&9rcAs[TZ8u.` 0"{m]r޲%8hޑԊh;YXI1\edпcLQ4 NތC]W!,>F fNF'Btj5q0O^•l˩a֣ 8dg@|\P-UZX!2&@L|ukt;:aiS엛M&gm!:86lffgk ErqpL8!AetP |B"*;'vU{s W/%kr Dkya1ɻ *k}ldbB#j!lEEUCPh{N5Q.q; ql/ɑJټǭԏ8 ]( $w+X9ӛ`S.rŁ B^,*X& ' y e$u(z 94ڷ3H7@Q7֐K5&a'?}s? ɠ[]xѷj@g[qJ~ "ؽz}tl+fwBW5]W,<_ӸI\LYL''kH!ݼvA6j8OKݣ@tY1p8{UT}gqZֿ,ftڣ{g_Aٞ\*kJ}S\p\-E! %k#Emm,go!s3?H׸ Skro *5y0BuQK+Ռ~pW{cm[j PGn#6 RJģc/mHǼ-"'< r)<Xɠ;݈<.-,aCniſX+/n}}+ȑ莱?2oO| ^xU>؆G/&< c%`}2'WT}W dd7ۄAEAE卐ANK(1u.w`lr`&Œ%4$4f~/1kZ hB>) 6NtH':89$r1u\9 |sGC<56l-4 1aXFC>fWrSZξ$͉+wWӈUݔ Zde•O2ђc TG R-[&^gi+Wm$M.èXyE̘bGX]lU3EPPhPMWME5tpGo` ?62WGZCiǩ-u sqd^D3fI㍍siV7e&G%tf;-$-2{7NځgpF6t=./? = g) ) d?8,ߛYar.h@?ӟw' 2x֞) 얕 閸motD4 æ0DoH*|Q|ߛ'UE ;rKvw@N*pa`݅!Z7L!_j;ߣV%F6Fkd/Hv>"sF49S@C7q9BT+ v]2*ghҟDv躏2MyX(ǓBP߱reD틨Z cDTpHbk.R*XhBN Q89kbv˘I"LC\CrX_,Uk]$:i~B=Mw}@Hc١'xj\g|<@‹s$U**lSU*is>ej_ʁAugM6cxn #̡ B*]@rFW?c*io!@GUH[xF+Xk(f$C'Qz`Vd(:h1gvD# JܟÙfnEWZ]U]k/WDGBmBlm*ŷ7ѥ6  ۮ}gWQ~/Q,"~ScP޸m0ͩ#UQȳg˪6gfsZfg h|gMqӐ)m{vMRlv`NrK " <ئԀ{ iR(: ^0NMpGš:ahGڶo|\OYܓN+:mC0T,q$+a0YPFZw7 -@/3!I~}t4Kfقj{)+aQ1TVrZ]/CNϹŨ՘?Ķj5wOdYvSav]R {afڊzTSAuJS"j^J Efls-i[8//"h D{jʤ AfVxF, 2±^"H9O9WZ uHUvZizamw\*¨Dž4٭Bܟ3S$׿r/l+cRF1Lst*(6sW ĩc*v9K=d'24XdCϸ?툻>qTsN*D_J4(r:Vrvni<Ќ5XvB;(hPirnϝ?.8?Z%Gt#}C@֖N Ka$az02xSp8_& p ]vq`+3/]Y0tYqmV*vU>,:$4p|hj5jDKjwJlM#$U&ӰnF\C`P-}1!d9$t2sYSIl,5bk]K_8lL5-IϵG ǔ$,E8X'櫈먛kO+Q7oׅ/[`~{yEe=9yG7s{S-*r j7*TK -`~h\6 G44:z㊲ވv= {!G10Cweo}T3Ns83t.OyVyQ ͺc)*bj \*\G0:;c^RAv*ҩ!mb)d7MM%݅18H^vQD,XaPy{Fv'V(4Qg vp1a0-stR+q*[{.=RKΣVB'!vPKzjLY#EHZ֠ JI +ޯFVg+FHq 2-?.k¼rפ,R\qo'a&_g69|_[JBq<5A=X> -]ㇾ41 @ķ HNqD{1>k#?t™ T:q$a`5 BS+x#jf0o-xVُB?2rL]̍^zV@xNz (.,D?{ӐfSeX95)sCdy'Ř:Ik / UI9nöQV T/G`C-څ&k~I_p^4bO"(Cm/4JI%6{12" +=x1ZM~@5"QS4*nL)޽߯,AkNZ%ꋖyN+p ʁ09=>f0& 4'띠՗9t[Oz斋eOw=F=ly/dC*{#Pu+Np\k|l{ʃ8;i/7ݼ g>mbLzxϧEmAZr/`~@M挵R{Iq 4U]UȈ1L mY>D(ZO*$Nac~uk0:M!CO_'Z)77<Њ }EOK {Ss.t"&G9nwoɼGk>dt|L8 ΅OXzby<#yZ*jke>O= ,>OεMJY97eF;Io%r>AKtWOfγR!?3KMW&Cω] )7^};žlJ=.d&Xӑ{ q`¥udh0d1*/ݘ;?HҲ}L9[;t]ve̼ؕqg|ZWwr#~c~9^d~xpI"1!d2fYjSL*|и>릹kzd`*V;sqQ.HrM\;%X;-IRe> ġr2s`AU<^&}#n7 9x{!u43VbSb32-3Q1ܿҧ(Z>3HAk++kˊoc^e`YL e{29@ Hk 3~їٺT͌"mWu(}4\NcwLJw?Tڤ͸6kh轊[Y{:SaPBlC8ӒJof%A+@kSYSe@,^߿NV&U?/X7iAb8Aı}xC?8 *?/LsnQTolu($jz 9̱G=\0wd+4#pX!̤eVSlB;m1p@~tN ,=*R/TYzc\$[dUKq8ERèzN~9l"*5W4]WVbE,. $n*.gm:T hf!a$oF1-"(`c+mD&BdK u%>I\z ݝGi/ @ ) B:hf4!}ݽ|n!ȴ)69Z~Y\o(t }cXqcJ]xeΡ Fk6:k+\ǍV Mgx=h|VV QrVԽ?"^4ٌs"~,G=|6⸮,>ٞjN%vJͤ`wxj5v}bӱ4ՏpUH^SPk%\XZ)~*&Sc :SA#hf  "O2BMY"fPu{'qW^zݭ|36G0|#xð,(SKw<:aЈ%O}{J%Xҽu(wp߯ nM74KGS[ ~ IXI0sMY|TX(FW7y Rf|&BA2ĆBfq_'yt˳OFڽYQ |2 Ke\ 1Gu]ZpTvbsٕ5-1Ma Luyޮ77W1d(ݑ `rN& *O )4R=mDcXxohuNOZ{r˾$/D?z*{ubL4 xQX9 ^ENd?)xzb޹|B %.tb}=k\eYxI)ؿh~2O0R +r[=(b?XcU e_44)#5y)NC3]V?GLYQDlJl}Cx"NlQ_̂̋6_1އ"O Ƣ7mar]BbFsn^1Q8<}%O|qZH{opILZY,"M!kdb{{wIfODtfR4%#7"#7SN(YDn-``pÈg`6ciW8EN&˿;'ſCbkz4Zl"qk@ҕŽ^joJuc;Fy pN7! ]׊$Dp:k+8ɨ|}:UZ:a $$t%-)Q/]}Q^l.<6_tڈI_["=$bXg(ح< OWus4D /(/fC-01@u0crbآDТM bo;02CF7=/Eqm/O@42,艊:![ }N{2y.]NÔK"[LsNu YfC.HgD h.X~ 4\cl7G _ڒZ4Ql[k:r4{ĿIa֠1Ӭ#邽,Ƕ)5i`Ύ"Ytj~ B/OX墟x F2֝Igщw[x\sU\ @7צG b(ԡKc׹o#5YJ7vm6!gxE;B[3Y[&2Vy$Y߄Ox_tKO-\ WX` g9C C[VPr{C<&ݞeY֞_9: 3ƯF?]$PǸ }<+_k$ƼK 2/T@懳YmlAB"nUsNM+>$^:_os]!efMՃ%G/ZQCuA4S"J(U X7Ԉx"8$^KP$krz-(}4*r\Qf.lTӄGޭ)(52)Q' {z YE`GZ2^32x4[w=m.ns6b(Kmġŭ7dܫI?v xފdr`{{AefӺ{ <^o䛈tx%Jv{ '8"梼u7KCQ e' 3< seĸz{#}yb]M*ϘeNq3 Rԭ 0!E| Y4fMZi8iu.G4j^˘;<'@]omwr)%f3L$&4q!H2Aʋމnm!_HB?8{h޶D9 r3 $[ȖI8O=546;m٫^G:Ujsż0,$H{*1 }^\ #4J~Hq4(##DuwQd%y"YRPf.)(/ s/wUj~[ +QK~o~ .ZAJ3\|{G$c"N\W]_@~`ݫ*KDnKDsgfn}'DC.blQ /40+M}wn_&u\Eۼ94׎\*l҆w4 ϸUrJX}su@Ji=Po]Rrh9c+u,([.GJ ͆Hxo*g2k&ջDG $Qflzc/l ΍ǞrQrU\c$9HԈl) Q$[A..(0-oZQ}U9]lM!ݵqׯ%N-J%6Pirs1G\XLCid<گ3U1 S'Y5g2/c-g%}ݺ-z~`'vle;[A+MMAr5P)++Sy_mT*KE.irSTydc7m ۹7& ^+su6A2QQ qUefbhLڊ58Ty`֐sYU'>i<ZY"2@vxld>Ͼ( &/?(#pLMt>ؗ>b#n_"Ze57a!RoV}^kD+Yb9Uӆ#4ݨA=o'`cWڻvpK;kԎ®/ʍ^^̨CEIYtሤW%/xGIe#+]PyV3̪0f2~hz.{uk#`(NYEN|mf\ ŮUI/$^*_zM2 bq4)MQ?/] 9>>i.e_Nҽ Ds'w!gl^fiM'=2G7Z%JO>mZR Lp܌]8N-IIT_ׅNJH`Abi鄊9%6SRper/ V6|8Wk_Uc %J!7'cT&p(biEp,R~:u lx$f<(~Oa v`ta)<)hnv$d`q+X w#"~h\Y!An0۳z( .S.tKe)C _а͹ Av.WM:4 U 0Ew~HR w/,)a4¬?-n"-F^ *"Ŀ7wp•\FDe]:BD [b:(raM' i@E8nTWw+!,3jUDW $7̠Wc_P-{+?&qh8%/pt4L.t!mЄ CԬfbƁVH NNz^\rMP64{:,eCp"[Ǵv%<7JɁ)bx<j,cO*1i$c71^fZG6JUӒ1g׼YWx>Ӊ~!J'ԱM(3ܝx>1ِ\B} 96T꭫-6gP3׹DaТ3b""G|f">*aMX83mJvoy{sQL֥x= kX:}9MBN+> l,7rQfC~ ž2V]ƒw5sNk& KmCN;XMG|3Oc&߽X9<#0: s s+3WCxR[sE>q,ArIR&OG-JԐ#fڏB73x%$Rn}qh!iW w2.nܡ1!fcH@(ͼ*Cr&2̕PBNMXk>WPOpb(&wm/ f帝A&Lۘ P߭N' `Dn~h4?ۯW>1yp>G9,-:_ VOa*v! OU$Mճ{R#͑B;Ьeۧ_.D\b2 7ҶaT}@_0q2vr]^c}=g>lHP/9Aˍ!P]N}F#պN~C67`TaͯeiYV`"GVHvzl˞%/䈳liňM# yE lfo`s 1'rDu^n0)RpYa)_WX%xp>1_hĆw^Iozcr&rݬU`b(|PuJw8<)K |`$J+|F^Ӯxxao+ʭ}le-ZCSxqٗP`1SH ԡuf.>'$rwJe_Ҙ>5uu<ć$I"ov QV[jXX{0BxTEєVJh2v.'_X>=G%{(UYɡ{!Kf3gX"q~m]G4r:v2.N`499=b:4^rJ^5X`U¤J*c*z 87Ֆ3q|[t1êf~nNKB 0oͮ3<SsP@G)4dw6Vu#!}k}.q}wJ -|nNmCLyUGYIEzmV`[[R}uv!~Wam穚0R>G M=3N8mIst<Ɏ1N}[g;C]k~Rb>,CSWl0h?Cx[y8S[ݒ?TkX"DDz쐔 Ҡ5ڱéGqaPp>UiSp& &F/73sﲻ^m[`[A#Ex{dd5G)17P;@21Vy=!,ف,'u oa:)/qgpL/P䢌8e/ ɅUevB1ƛ? rfW_Yßujq%gIJДmⵓ nݶެܤ}Do. I69Q8Cy ͳuXԀiE<h*Tz4ρ@[}$tH梒wIG VCfT Θܩ(?&鋻)D9*揇9&u@'<?hJwH+b/c_ub{!j7yP\:q2̶_(S.>}ɗXl^1.lq²Uj֐8Ž.~P{{n['zQZxoia0;K}-0\.cXU]+EQ5*<ܡ/D28{T~3f!ġ)/ܴR< 4K= ̡%)p؈OboG^vrdu?.b|鞔G>܀t@&Z]wGUz‡nR{X=rҢ(KZB(CnG4̕Lq{~(iUT*RL1$Fu) Ik &%Y+f{3SF 1YF@DClzd?&ֺ1vѢC}!mftUDf;R/9ug"hr-M\ohɜIUmH"`UJC~ µ-N:vTs'tx Z9֯,#ʀzKŚ"'$}"˲\ȇ-=:.:hnl 3RW%('D[ۭ]C&L |<PL~tvo<9E6SJDhB!H*kCrN#8G㐅$DHI &cB._TnNks=O) V2oW![ڭ'GzçTAD?#P m0f,0A#,0C_bc.H Knp$kikթd `C5Ĝ BNJɄan6mgʆ]nts;z-+o9ɣVhzV)S-,]cC`ez?j/-8bYZUV]6ۤ %p/6Yc|@cB!'czϕNm1m? f"!cJ0\BGЪ3Td}xG0SgI7qTGkvuD ~y(9ƕHIWu>apYruye8FLw a/޻T{ϳuj8>O% 1\kl䫗>ǼO5x<&bA>hb$1E3 2-d[ғxq'_L!yò) .(j}󱙟ʀ[H0(Q E:ڠ~ Xߚzf7pd%94)A`>nvhì+GO:؏xav2onC=хCa\QG7c#(p̞(UawO7ڥ!E_0(fq A2ʲyʹ_KM\&?GtI9Y~y? cE1_}^E!ӛN3I`3toѐ,r%Zͽ|0$(#f^8c[RȞ=p# ;tk̈́SNaCrk2[(@gk/+g8E\$޸lBu|ڏ)zO14i4`mErƦ?oYҠZzm?=js|mbOyR܌nsnH[1X+^ C78;t$:CCo+u+quF;]-` B WS^@E5(iP,dl0:clzjNkG LY< To*ҭ*FSS+$LyuK!E!70Yvj覠*S<0:~fo&cwi Y8maXpozfAd5(bҘߥ;7_? -%`ۣCEq/B ֳ즔[Z}`!]ˮB衳7U]Q- 147LP:9r`l[N%P6lg 翽tt!^]@ \BÎL=$5RWWQ,E>H'J"#x,\H2c w,҄+75 !>nJ,G%Ӿom:hw~ ^D=T %oR۠/; @W#&6Jl& x1S&Q LPU:& blyx޲ ="Stt,Fu42Mo!~Ft zLY!tᒨ4%Xv C =!% :9fc򱅎먔P2%9 -l~3' \_ȧrmV<>|i:H^\by]ʁ!664"=2m>.IK~u꽪֋e Mܬ5V#Y^CPSaF}k?hp̢fLw0|(:`_vo;K7)(.a,չ띅xpKVTaL׹kεVŏXSB GlGm'.(CA7bJt{-讲$̙u,LDҪ7PX!. ql 6 nݟr=xhpg9mO З2MwsoT xctDj{6c k}2gmi<{ rǿwGX7qJi9)Y#f-NNT1X?lH* ̰fLF6$>3Ѝ}[K<&9$JtWn:> ȱ5ٲo8z@%\7mJԪKהGޚ3Xe^i_E 2eW¾,W`ChMG:`1T8Bh[&1t=y1TU7[:)2% ʦ_^H=Ƙ>-1~m 4c?y@LWALƔ;c\%i!$0:Tn 1рv,ߔ=!Q/"0*igAw-ߨS.d]5T_%5 ӕsU#ӏ߹Uf-ʀ'GN++8ajk"IťݐOgtqsp&(u4iO( 9pdq+y|k39Bo#?qhe&+O-;H&/e" ?#i{癊.voPKCqs^h-I 5ad}Z%ڟ)g5IϠv^9FyԂ/W̞FV2GGXloy+FN~>l->m?G˦7w %3)T9l<G`ieH+͓~K]$uX>RVO"Whښk=%a&v0>\vl m%6 (ಎ[0.3܁5V=B]'9=_U[wHBdm5UB1!NNB/FiW*FQa'ۍphJÙHv%'E0 `Z:vzV{ʜG83w0G cf\"+Ӱ-h-Zq6nw[}.::_ =qiah\إ s[ /#vmSndi`=g66FJbL 9 O/S"R^ط-+ C.!j#0`2 炶< >S (aHf8!(C|-Grl{?!B'; ykU,-{+aξTRi ʤf t'ZR[ c&;_`)+6[Rt1hm|^i-bhD0-k1a/38T`H#CynV Lx]ӑ2B1آ5sRYPB=:n>Jˆapbfw0Vg  e&hO>ȴ|y&%Ntw[6n k`#]p}`u _qDlf6gJRVsFotExp'@FS%@ڑ_+")sand _t>[ԲQR>|y$j4nvBBᦪhnqM0EMGT'Lmʕ.k@e$tCF Zg.F-q,4b /)][c wy,"=V'EgMGvz-%>z~yfw%`+kx:Lg|tPzO*o{@oḲ2pjv_F]Ix* f2tD)#(4CF)滁O@_pPcjvs^sZRd2t/ˢg"sNAb%jܠ%Q)PJ?oʟ/,^azHP%"cL{7qk,8 AoΎ.-θº]ٕi0/Κ!]H~YBHK_Y1o%Nzn,Rx*i@ ?[T#i\B`dT3 đ% 6>h_ [#kwoOEYtbeE5 Z֨Y6 ͐Y /ՊA#Ml>E gY玗s[|>h,~0Ϳds",ȹr] I~vkMClj7ycZư~'i)_xD']w'η}|nDAxs\1KX˥!࠿!fƱ0=Ri QA5عQ0@?9c 5<jzenjlp8uŏfr#l*;drN))Pm9菤0%8:rfMh+~EpԊZePo7̓=Ɇ"5lDս #X[{ O?)k8{.}!<b\s YG9ډY v0k#rISS( ڀY@mJ Wح u8hՍ)̆n] hJa_qwi3i,sn%TupN3p5i,GnYW +CYU M|t⃟i9*zdQLti;eNbM7,deq$ve~/Rհ3bR5.g<,ESw ;^':-Ssǿ';k@r+p4k2I?Mt3Su[&K=IN4A#(-*!NfCW(#2i|$#)WHE)!E1QO\}5tA$Q!W16*6!/*lpYnދlxi]]Zl8RÀTDiJAzA!Ɂ/CY=X+@pLَ&sA=Tn ?tI8t}k//rK,)a88Rrqx7iB_?6\y4nOYj^*ZYhGA/ςnK86r3?v~͒bGbK6wFVqg'tۉ!PXW7./PO;yx@* THHħp\d[I˧u?Y檺Jjb05G?}`u$ ?R{[x:R7Sb$CJl]M!0*C1}˄%}4K<0b5hJ.|0FgjG!Vh@xi( a(e _[uAT"w#RQVl %ۄȱAг AJ"%E~4!+E.>'9Dշwt4עƬiqOsE$]2ZhvmRY{oq8>H f2neJMccH"p>įh;rh&q:@qJ:-đЮQPa0 勶ekG *0I,:o~U$QdƟ @VVĉTw0R k)+A*ki_ArPyK:|ϘGufx*SQd%ȗ"XHFM4c'\$K,enoeRKr8^Dk8YL_>EjZ/x"^Z3V2=cSǎH=ә)4&]C&kGg(UO RUe{xT!Вq:a}u 3Y־[*,kH`PMyl<œ>FjaJ-P7KyOotuUybnj"KҢaKwIgwE5C5KDАe.~x#5 6i&;Ifr_e//v.h6a. 7OfTz2\& ֟gƕX䀘P{F*i&SLg(xv50\JivP@J+Hvb& SΏ8Is{L/ghї*JONciT[FZ$EyAgIC0HLwre>@ n_$,A+:eު#⽭IQIh!b@؇Vޒ`n $v/(D=$q8,: OX9ALֵcEK"X1t6EMCD3J>8#L<ҴmZ6@-!tk-ˎ8Aѓo=OeR(r(n^C$tjԺ3vئS|m]]Q&ǽLzTjۍ"L2?MflxS 1ۦUr\1Ӱqhi+d2%+ϲE*s62{% Xk`8㏟E[ڬDZ <ÜFyoJ 5/Pp>f0 ؟cDe:펰zdncFݲQ<+/`jr#M.=Ævj 4 Pbʰ`okHn!MGCXнB("+IP6fْOG@]pgi?-2nSJR?n,^[-=Xܪa/I?ʈ$`֋1R5,xZ+/2],H{~hyr!pJAD3Wnvp@mg›1t$t3˹L <4rtU|@'R[ &یzE\Ÿc,I ])vHC#+]Mٲ9I^lZG{$RM~j5o6wʗ\1Uj7ARɗq0g~iC5жZ8T*A10n0߂蚊y&c8/鍇/|S2leG-/i%M3 #<=;7@a08'igvr*k;ک{jt*A5tfhꩳei/;H!f)1 ڡGiWP=R (xM_ ML[zcۍ'g腫ܖS!5{2xgtdi2φqAޓ[!^3w ,QqXeu 쯻zd},Sǫ Ov%XaLyqAg+<)Djb(?MTM:!oxM]i5T4yEۼ-'PQ!W0SZ8Xs~a +pPL=N<GW3d^ds#&Nr.9Uv1i~;vz>vDRl(m&ǏbZH? G@tKpylC,͋RjX1#O|L%f^B4C-B%Y+ ]-0oTL _NP~H%- ydu[)m( YK݁Q!] Df tƊ\Hvvp"ъ;y\OOԕi :6؉F -(Zmڎ\ڮ8-ϖ'aZSzF#C7ڂG"CRʄ.z e)SOhZ4ߪZ#QGg tjgfʤBBP/-Ȥ369BZ|'^v3wiٕdQO[a *~7C0jJH-kb溨~U羯{|}勇?i#,QmZ4&l}fq( ̑A\cZe iI;ރ8m=2y_wN6uM ' 2zJd:@Y镒S2k %Zs< 9 ,u|\6Q_FII3緭mc72TeNly"%/Ϧ y]nc<~(tE̔a8l܁sozpʕ$kRE|7>| Y+ ᢼ_a\S@%Q{>p˟VPKqB2Ƥ_>ܵ@("[jo"u0R' 0~36 0{Ge6C4Z7R΍U U$EoNM8TKuS&>HӭQenЛꇳ S r=Oz39qsII Ì ATElI-wc |:zgC*b%V9RUA#ͬ5+^̙-zAbHuȴRH`q/x~#V$@/āGɡ;;; YWd!\k_ۆo&SV^{Lv0&" WNsT&NP(]&}t\sGr2L 崀ӍY7 㘹~ Tʈ'ơLsgƑ᰸?>&TxwM~~%JfO էH)-FK*K>2H.CFbKOq' vD6~TqJ2W<κ؏&~N#sŋY؀ƍKMB_(u:6xi=LF4YϬ@ޟܙEgMZ;aIDnDDjH*UFmp4F]m:c3NX]s  2{4&`ֵ<*2Tң?,hI:/}}]`>2MPy&#V8H ux[$ZoND7)M;F5rA3"<c90E.v]/s2z ~4Fy]\2_0KL (Ƀ0fxzB _hqqjl=p;?CElB1Vnܐg+E[W4jrtxyٶH{Uv{\?Zu .>۩E@lhKa҂nQH[@CAAdLLʤ8]ub=pxʳpbhIFCF-f~$fq}K^Ǵi蛧?_eap(qmZ[&y0-S=q+EmCiΥ4 a^ l(ngNP=*SY;Vac\\\@#rˬe34$hؿ#..N' t~_Y@ Ђo׹O9Dch}!g/YcׁL vPk `EبCF:^#;mzA)~|4Cs,y 0L a3)EM(xD6X-cx9nC[^LTEq)ٹ&KdֳB`Cnxr zKJ(y+X2ß~\x`0Cxe31ݣ_kQs6Τ |Q67'7峵OlC/U@z+$dj𢺃`ZZBV{)K=|]>JB1.$ZE#5Ȼ;62< &C_:?.O{G/ ;uev91*q_gBT8oId4QkSQ&?y *̗LLCX$B⨡">sRo]W5L8#Zr]3fŢ_/Dk"1H/et 1",47US=(^U@^@,{i@+Us!L*ZubK lAת.ﯯ o i{iDbium;-;qo>7Im#9(ԧmgKv8"iMC݊#ռm\f;){pWE(^8 k1ɓM w2ɘY`.lpa< >|7.w2rjTq syl`JwWWQp Ͷt0R^ G'&sKҖH&%hN lbF`Ф?|7oʶߎ\!Y!kn+]-3 Z, )GJ4(1R[<lH033M3>JtD#{Q RhכHFX Zs>!wc&;0#5yX2 I{JrN'azs鎭qkҾJ ܉!{[:?XuѠ^e+?4 4/vo?"Di&07βƵso ]H8ݪe^ qXZ4Wd%pIZvPh.E(\9R)[_by.}Y͌ejx]F?P1,@*M9(<\Jқ1\m~Oˢw9{ #I"=EF|6nЯ&=$reTkbR*jуu]W|<,w: V#o\UALa$ H Ge0pSEHd^P?ܱ˅ߥ S OҦ^BKB.pp~5< c%xm1ڭ.B˩Ys&iwkg/nq/@nA %-n٨yUy躬 I,!5m}$RffBSw j˓tr`/hu_ K#y帒>OXjsľ_y;-O"2bfпN6H>T3b%.-R -`+/n#CHAT4#X dH4ʩn$C\A.Vg3U.J ÎqKxx-b2 m ~XN8pԖ;l g#HH7֑6Q!zEU)zp6+1"ԎYvzi6 zd@HÀ= t 2a/ٍvy.}bX+ FZ!Efg{#ha# بRErAyVE~Z8uBx-[3G_C;-*Ӣ_տB,CQt+%m %4s@Hh_8)rdeC3aac e[cCRL={?~EwJ FS9٭LƼP8Fug wm% tL :OIv3$S:&;ڒZ1Fi!-5,pښ*eD%1zCcˌEt;]0&4XPVԣڵ(])n<G//+cjVwe'z/=\^p~>ԾzLǼvg?g?>?)V Gu8,zN2"c[#7&`#8=Y& kI 84f E !%7bfIQ %~}u#wqY!q0jbo^2㻽4+vOm-;5& R ozf ܠj=/{e]%PdSA@ e@o| 9$EUj V I;Jz/ `LRXj۔Ie-,1vK&53(hmH+х ܨ+(Ke%NF50Jr0o50PvVf~uW= yC=wWоߓ^B?}C`}毙ko|HFɉZ[V5zg{p nh5S+voM|ol1H&/|Z>ep/(T0eOќL]G AF!suQF| EʴĊ}f{b_Zޅ^ y>4<m7`3ԑZ@>O<3B&wJGZӧ0as)&3 7`g CZY0LM)sOr8AH`LHp.Zו~7qۼ\* .tSeť2iYjYi/`j*RZx@㥖!XP`,U4 &Ih!STq5;"4S\ˣzhCMBxN#?98XېFo:̼X [J mdi`@4Kjv(vT0 s y3Uؽqg4laM 9-Zllñ:.2z[Ou5iCK ZM-E zڶZ`|D6}:[ +!"-_k\ s_)ҡ[ ƛ !2@OLg  Pw>UhnGlBsj; gW^~Μr w(XX'TF8 l6lt]p͗FPY}Z:Þ=L^c#kPX@o "4WyoQ(@iUtC*ܺe$1L8c,OFL}IGT ަdHx-U>0o՞ L(Sȯ\VA@E=ɣCp j s.˼!I 9ٔpY$v^P3g9jѢYq pc@|d]LE5nQp91:mcT5MYm(6'z0xJ*_y$v s ?_QŢڞ2ݑ&;-b }365rJfvfQ>k|x)Gvz_G? i8<@&id)F&dDVVoESA~FnL#+K;&AX@0iAvz:TaE>.&Gⶠ)Zf'ox_OO# t% dm †e ^U;OuL=CQ~g kڒ{J#dj-B>FwBZp}D7ުb2.:-"\E_V>2{̳L6ٔd>2-҈dty =nw(q_O[%~4K‰tE'O-)fO  3{$iAeijF/Y :V.P*<̗~1K΅yK`NO"ԦtwN{p3|9*;hW4auc?PǮ;sxa^6܋7J`о-rj&WVORT?P#qpcԼ\*4ioHS}S JLjuR Lxr09ڵ5F@Id2Q2XJ>3_J$g;1\ɟ^/lYPS[QM w^(e;@k,W+O4ڞ$:ލW[uVmFuH[QBLIܾmᥘ{OY6);Wfc?6 $9ZcFA{+^wpI;9ռfW*gӇ8r(bPnW1l %HgbJ4ũLyM}[U85)W V`ta~~ޅ/+"k)u&@59MZcӪ >o~QS7Lˉ +fD<}$Er([e$ci,3\lWʯ&ɚX cC_Na!Ş= 0#+[&v|tOkQQ#><]x 2ґ?FLKA+Uܟp U{]/`S{Ve j4MР('t.&![2m+-K싃CDq ~_d٨4,;@1QP1ZM1ɳPR ߐ,A pssa>{a{|drC>@| w o >^Kǐ~ vc`5*}΂9{5,gċV[2f(z!Q9'uE"Ӳk Dxy\ϻ wJO\pV{LmE: ;Q'+2J8]\W,*É2؋/.]~V/#Xݲʽ8GA %-(D3Í;5Sj^?I،> d/;iՑ!|`SH$f(*N2]؜WdU|F m<:cPٱ ρ#ۯ: lRt3Hul]naNRn1l ༌\SٓEҌ WhΞp)bRbo3. ٗj)'9BАۘOǁ\Fzp}<.SI2ݛ!CԐ\e@(R"S~7=ii0ر^O1 n+w Fnkخe g(-fy֟کz"V٪lI]h~|A m'N(EmF@?'%9w0yei(@Z u0.vsT`2/}-y&܍UrC'w-s0zMV&}r!Yܸq, aQmwP wͻ*/gzrAQ'i=SμEH;=9_ȭ-p:A?SNIk95H:'Z%(q惞lia3;-8%4°Y&VSBlBqpx} 9o*W{ć53>} XeMq5XR!7c~CymuLP}f}%yO{h=|y('R+kN }>Qȉ; -GM{&b8ObHZϹOH})_Eiaa5y+EONhf曲{o˧a_VeMӥSEwp/m#":g3Ɋ~13VX3O 67 Hĺ<D%ֽcwꨛbMc#avQE[m'{QmBE~cH(fF:Ls&eU*%퍚S)8w,lC44'EsrB0pV-k: ۇ `7{TE)/|>;7uf$e _>aU{%/rӀ a*"0}h2V~nÛ)J[G;y#H%Ѝc/_\`;+BAOq+gZk;hnik(;#rjg*h6U~o-\GX͈*%< @&Q{^g$)!o#4]q] `ll )\;1@HQT.rss vۺ#w8{xl")s H3$C2J e&eJ첃ȅjx2N5o`1*kRyG4_#=^XhΗaq "N8|&5HbA# O*h,:qi|qWTFr;A:B^_J HY(xA#<&g"p^J4=,Let33@Vցul)͉dۍ8b5(-pvS&ꯒ7v.ab86q3ȇs/_;tE?J9Ό(iVpֶ,_i޷oH'0O ĺ%NǸnjPȂa_z,8h 6ؓ-UA|(AEڜWҵB]>=c2պt/%Ȫ̀k0NΊ,Ȇk- k_*Eeu?F⪊$ۍ\]ja?RQA%Ac/p`aVs{1Et,W½g{ｋt+צULugH- Ldn떞L--N ;A'D*\#[Yy][CbO< =/UA FvAv}99EKA! Owm( N6MVɬWL!o3l~`Pvmm#7u0ցւg*/CKKb6泜pCtA^SE[>~c+OTW˪p!,7 7 7O3Nje&>)1[ߚJeepWlf'|O ^Ju+eCQ&eۭI^yj;݅ /ejF}ʺ.C^}b%mGsqF /LL~ aiF\!m1`nh@/SBY(BON य =m8_)\0iq_dO7l 3P$5c=Q mСks`SV eq_p_XT; FviP(j"\tOwѸsH  + = 8j_V_ oN& isTNGz;+O6Azv.=s=gQg hhșs_D$Әi~NY/&@oT0B L2;MɹjBœzh?@[`1ѝp{@ޱ@Qj-,F 5±NsgxR :Am$v2[~K,`N؇gg74vZ vgJ{B.Jѽc+m1 oTaan8pr! &4{ k`C<> s4Tnг`&G"g]N9Ήy=qd#2q 'IB_pjxC{0Ðt*yioo/  'nH8m%1'M6‡vKw_d7{6=nqyAɧ~G Drkuibϵ`fU3ZXh^ p˛eiD_kIsIIy4$ GBrҎoDz(! S2NBӨ Nޚ U qR/ 0; ks&tbi-=M4M$©ǁz) c%<BC8o١h\8$&fGcz@R-:ǘ';fM C뒎AMCnb5dzx\zul}bo@G삕߉Ѱ ށg#{` |0~eͮT3B-7O7r}9x  R?ّ4R:xo|1iKF *l^6sI"Alq(HOskEr I?6է(dw2fQZzSja@}É84t4`S_UfiCԅ_.j0pFk6JCBOD,z6L9;ΑeN!vPo` *PN7*]ijbo9 t4" $ 5[ZGau됙Y Ð *PeV+(ؤ'D`ΓR>BO=OwYB.8(]MAwOW|׫}@{U&PH,X"Io5 U{0zM:`G},l5GϛZ]$dz8Zq7 _}Wpb iO@Q`1_Z O|`lџD1aBL#>5 }Ak~V^vRDd89~%_,j#Sg+FݥCVKպqt.$q`4NLc8OvAªJ6wɤ/$\F*yȓƈuk7X]F.v7Չ})cj0(.@xg1i0?L"K\!2@yF_+ .=ňgr+"~l}7j1mYĂ`O.43l,!\dYbTb&XpVf|pnuȗЯ8ͦnqh-wtU }鯜zSado7!^jL~?y4kN$3Cud=evV+" b |uWުyГ35 (5ݥȋ4r>\Ϻ wlHq%tTNڎljKob:FVٕKJ:p&kWK>5ҚQD9!&$8L=WrkXBce޻<g?n.93hTib=htJMN"KR=`2;ᝌ$Դkz\(U:۪FlPn5-SCvB'ΛOcc,_/L;@ y 4ŋRtA(Kt= eq\y)?@A汩 c?`$U}PKVg70-% vd VnmeɹQʧO(k.plTzEZzJw8o%>2_LqF!Q)=O#@T] xǺh7+< 8ut(Wa~TwKc$uaKɳ@){N nK=k\ˁmIvU?p>P+snk=A<DŽc\&]_Z-N^A۱_MꙪmoͦ\V/)̛YU# l\[5', Kȏ d#w<^ek":W1se YB9Cb%]_| b51w)a!D_Է#\疁O^ȴ/s o)|Bv4Ie]' Γ5zA6")}T$_m8rAGt/e4шOa w%;~b TZTs\BRoW| w /Sϝ]R +F=5R|{*<^\9mS谋y1rQy;1/ ?_YN:C=DM(bH4I"`"d9B2oy(yLa+ D:2~XXq~p.Ħ-fWpգ i hҩ0:2g1ĚBuI 4;&)0;\E4I]N\ݜZd̶ȵ8hU3\yiTEʿJ{@\1%'nU>@ZvI[Q|wL)RAa\ʚ;#0 vd|1wI5ɷGyBMVm} X:U ||wз ,w#W2Q1ݷ&fu\i}&9t<ֲVʹ b‹Y^:͸yOըI대-;Gk@y.8)?\3k;R!;8R.ib؉1G_\1`=t?p@_zoQt[y.*CIHA>*W%ާ+dt/t`9Hl84hrsjLkf%Yi > "`KTUClu=Y 6@jyW7sxb1(5Z䌩p8=NgH( éˑ?S"sx#>'ߚ:-_ԆocM7ˊDa^%'3sQ,}x q^{ L}sؒ|ԽJ*we˳DKHCcKBA<[e&JcD*el0ZHQp\P֧|~isR6nzipҐ2CV 1QIGpߕyF?{fEMkk3bm%k :r h"㰁[aju5)GY'FmsAhhࢤv+̭lJ`6kM-҇6DYLhpB=&#mTgN&%HZ5xeaRW@ xp[]ENi쳬+ː0 M W _E1O[@V\?ߣk;:I4{Иdmk2`>3IVL#h텾sgxp:h Q_?%*֕\mCGd%&{`yZETJioFv%'N1u[ ̦yt-=55g;]!or6ӝ39K-ł9F?)0B%CN?xFĕ؋ݯxz\ skx:=(Z.fE#='3͆JON..7e73fNQ޷bpo9{q>cԲ[.:qM+#*-ŠsN0L&(̕ "T|'HDHxRIZC7fA]FHo HEπ61#ʜ3dK pmif ZW\eј[rB26։b%vyKEP\yy( BN#[҇:AI֏^\S -~Zi/J^|kM6{t^[! ؽfL^` ٯ#g;6I5i6tCW{ot0@{n5[oz8Y'crZQ 8 G[ {$@ eFA>- °ft7>y~(3"b(u_vo$hU4KZ%;`7wBmU|QRbu\)3$Rɉ>uDt? _*f~3úIn e|uъD~~Ԗ Iw ) `0~V$}J:^{Ϳkp'o\m}bb =vuC"j5ͣ} L~c|襤 λ? ^1oD<ݮ#V39>S]5,ǃQVFN "Cg__yq=̛9R{&#] \Q ᯹Z0Ŀ#p!{k#J4<ڃcvD$7֫!yyxWg4#<ū۱#Q~8.:MYl9FY&Cә8*HKVIOXi8:& Z=5~(! m63 5ỏKj Q8Ծk)T*C"j}zHg -t jyz:7$[huɸƳeI`(KEvpSsfW.W&fj&&,SûM]uf6MTOcFalSvӐx$d9UrLf!@Wg7Q5mFw0C7M]OKު_pGѰE4vK ˞&6ǃH8H)vz'O^S*"ɀ,)V^}w%[P] eafsH4neC$Lzy{lTI^yZj Z?]4@Y$] D nn3/R/Jֹ^6E^0 tz{vcn-v 2]רE&y9(X8ZX'x>9YQQ(yU H=^. Zgj)Pib~"^PK[NiÓ>ڎ@`kڢ0ۘ8Kyԧ‹ZCnBhA .QKՇ08qhS\:r.{Vچ=4Ȉ)[a | 'Fki:;魧&[{-;0J63qL9S,¯b B>ufjp$Awng\3{w#oeOj:\NV )!xSZlt0tڇ!j!9A"7I ŒbP#*ϭH0~U`*UДu]ktUBޚ硯U̪89kk`j)8ibuGz]/PL:xޫfإ9[cCgKbQ\*hN/K.VB}} pkc;nQܳVױlOR * J܏3EBGF/Z~:'OHU>JQlD@m<~]c)~䜲:~(M _I 7ŗ#A6__V+:#;$,ml:e\tpjF#&DdS]d [}՘ڭ QHչ0q^ a!Am!h͛D79-!rj i cnkbǼsx8K~=WVaǀB=Iئ=asJMBm !Pk\x,?{e;&nX%p # *[*fݩtjn!O2ot^C[bc'qU++"83 IF\bA1CO:0w|N+W/Qb{_8ZR:ND}?`ID2/+5<& Yn|74$j=\*dWYPnRתJ%* a3PB`,1`dQ=ɶXPRȍI g@ p{"e*̩vє=¨X]%S`cQ9 z`7ER&1*?2q(R쇫/$Sb~Od*DqSC ~>۪>s}`揮e]HAMݹTDEn̉Яyv(YcFwJ]gP~D9 ~_JE]6ef>)zCoѕxU͆* Yaf@Z,\E"c'b6^$D>_ܿ 2XC(-yX"rhYZ&pi#dJ}nW&X!P;#9,f/q }tK2Sc$h,"!g=Ujם@B@^(O9$7Py4%NXμϘ0O(70B?2zZxDMI2IGmhS5-QK@g"vHP-ҡ#uĉhŭ/HB5/"8C39;CZGFǟg@z S$AN*UGF IInC|vk8(oUXɷc.! 証pL%򗘎#"z"=L5Q#O2W+'. rsJػݪd@<MJ; 2_ƅ[4] 3-NΜᲛk?[x:Ҍo hSQe*YfRzS)1o UQ}hRȘEG!=:5W;u/K"u{x :@'#H 9ℂӛRNc̝vZ:h%&\*h}T9@ Id䱄J<4.-[9ѧ8D 9 ay"Ӻ=V7K@VhD2F"6 -ً5_neoEMUۂ/B%@λw %EբL;wt&oj\ŁC`z;xME E-ܽµ ^Nv}+Τ1C8mwLulacb$t:'IV!kȷARTd[%u cpüq/Q0G]?_G'I{:ׄ-m9"#@D/ 4E&a UQ͑=rSǴ) &YFo/g0__,:/_ĵ㱌[=_ʹ(8sU~o@{P1)Eh |5֙bx+-gyJm_[:thސ*Rȕ\>q\G@q\eMzKMw-a# S8bdf8 7Rh{$ҿ ?mԘX1*r)KjP O}8[ͶޠPq8lawȆϬ >}DWt@LM>)?lZOC,\G084;<7L^xE\*(OCn8;״j$z'*RD W[ĦWPZb#V $_> h4I PA=@ 8yGcKoҭtc)IμL勄@e9#򁊖%,sE7;wQŤd(25WC]Z}y9\ ALDǽ+nB1n; 5q6!Jݦ+B@Xټ_d raꎾJ7=^L8?vN\l n ӎT5/²yiM$ oC &vGDw>_ \zYB(H}QgᅧCB-L[58@h{&_gXa~fņG6se!Pf,좲x3ɸ~:[u*0dhIt*(eيr mX}5JNhU5HTCb=+m2-P-6wĸQ/װWP@ s.bc(.|$$LU8Y.\5[x..]&r,7r! fV _\Eq v׉U"I-25_iayLj{{qQ LP{TSf8݋ Y kD6VrlYʤ|w?M)>+*T2t$F޿(3 'ɇzG}dS2wl{GܡyF,zF:`2'+NmNnpT>XHT M8ݲ\ba( R[=vvaKNjD[ >Qv+00.g4,sptshE(\ũz4 5ՙ5E"SBxPd+iAn} :CEt=aB(A];^@GbQ~2dPSj{\9'q' L3DvbaxB)WM 5e]y.]%r l eۙݠ6og2/$(@ysj^YIN˗T#pXU^ vOeHǶwxKt&S}ήϰU%β<ӟ&IW75R*%DB˒(ީ,Ko{SV%gTe߭ã/HoLKTlyWTk ZdU9P@}2MWC~ÐCN(Oup"W_(/7 JVktE8bM!G G"/mj@&0x@z9Lg 7׿TQ*-4&dwwV-"ވ\'~gq W8\DRfqЌ=FvP6їf^ C_sW^ E?sˮ^<9/6xz*ܬJQNWnuYf0:#BR첢O[T~`RX˝mK;S $)E.Z?Xq྾l |m,Nj &jͩWu2\T\XjWڻ^H6),N%iH37j C ` l)CnOE^QeBef-$8ﺧSC^[^J ry&pEiaMeƹ7;2k˩@NܳA@m* 0ҁ#huXz&Y2y  JOkDQ ji(>_{~6Iߣhly+KOHjjHn3kŎ< D(p@a?Uo})&~z5C~.B3#`Jf[f0S)Ȫ@iI^Dʁ_NuNM_dMz̬AgБqjD*)Q?{Mƚ0d|Uzҡ\ʯN hYh:U69vN@ LryYd6-"GuH^ Xn +=m`y|q#|CfAL%+$c])y6 ZCnf8߭S_ە] lq5 ވf_91FkxQr \,h>С̋E 쬂tP,RsSXWܲ.3ŭoLvHzE} 9DPVq"~e)#-> !&FTO;? :ݽb4w7;TxnqI1'IN* 5Qvb q5!e )*>>?IUtmkhfPFʧFޥIX-Î %ܻB랊zׁO}Q2C=_XZ}ڿ"fE%Ш r~XŇ% ]O>T te Uk,?:Jf"Cz7\zhy"R+NMeٓ0w^3丑SX^Q"f/"V*^Em @+!(O!cl{5 BՊDdF`4jbF>nP?D2qAhsOJ"Qr^X39mlFd/U= x@/aMCfn"byĖ S I´i9M)N WOh.ı7֒dR(42QO;%)MC0}==:Y?ДU5 =l#H{6KE &TI W=Ďh8{LYugڳIF _ nF4'_mp1Lph{դ }/$0ukPŤ<< 冄6% .@̪]v7\X$tE3&ZF>y VԠ&}NB5 z ,R$$ T0ЂIcyJk3eLfmNC/DdYR5+8ܹ<ߡEa&oUlL1ϻ< %%JlxcNF $L (ƒcYib'@ k.-K񷠀AK`nEK}^kBrDpa-wjC++*Vԯ(g*yf^Bd i< Q%so(NA y7݄O5~@(VlGo pb`F$%ˬq|g÷-Q*q u|p4#hVM o=n1BPjx'?z+,Wj?,e'X<?{c0ˈ;+&n } W@ЃRGbm8hd@()-:V9)<%h{a4ewH^Vv}+5 ]IsMa)cOuqMviy+*3GsuEue\?9.m{Ja4%;>Y$DmXL՞6Af < =T}QÜJ76RE =Ayv6"6c͢ɛy\ʅnOAPqOܧzIwK*rR5PGgے4ub`:v:_⽅h;2tz֨{ZKڶvL)drq!| 2߸=scg[T8`SpR5+hdpI-! 2`yQX?2l◗ {L0DӲ%"nlH|F-uAKli!5bHsǨ('~ KRĕC݊r_(eYy87J8fJ*1fQw7v:e8J+8уTȗʙAi_=l6OUx3r'1"z'xg1JTFQEwCrZ`sh4,(:a+.PE4 pZ]Kub('[Fwl/f iz{@Vm xeh`Z)Iw_F{@cS!"HaYR~G=snJ6`\FzE_Z[R\Ssvk-$;1UyI4e&h!cQ{"}b/_+O)E3`YIIɹ9D \nHMgt9g,AXEm^J#ɏ=$?bpe,by"^T成Qji&`NG)>0df3+X^ Ppsэd&n/ؓ˨~x10o,AA^ʘ޽2mR4 )Z=(%cop};Y#%Hg,jp7pzY:Cio 'GX+Ijq?k}!}bxB6a$[&E 09٠SU>q#ذ찮 dܴ%?~)\3ttesA}?tND> VΩp+2yr+rv(3bs( a,F,{q+p -J fֶ-lηZ2ua^Ǎ㢲ӭD+R=_#|?*ORםImaRtIVVa\|uAiN5fTPՙNJJ@s['_g5AyhmNp-I|!`q@bFG<܍ׁuDu 0~7=͒a|hׄTw%r$Nб"E0FϖO;bb\%BJVoHBeűvmP{hQJ4{#mLK0Q="Sm*TַITֈY +ȓy/YyaY;@ _`w~ﯓ]`< 4;ՃNHTq]A{'wPN6qI[R4e\Giҥ[F~ i+8,Unae^'mx`K+(=IO>^({&^mzС,UK@&Ə=-> 휹8?;7Y95xU@_!E;;fw>Olv7%-[>L(xè3-Wy#mIRZ)ij?oAed jƺr"AX1#8!͊S݅ (ߨ,UF 0!$ŝ=Cp(pCIUdƜ7x`mĖDu^͍Lj$5i}ˢH~ۚrt5SqվϨ/ɆOLEx {!2wk;!REHI-!3Uf30z5`%t[!Lc=?hCHZ.>lȕݱbEG'AlqxIXp_ sWtNb +o9gD 72*Ш@7p߷(WًLݲ)JMCpT @мHSXCܒmk;eqEc njk2^^[?Ez<ǭ*6g*?/CbF"Z="8 ?R]]E{hw%.A.@(6C/9 "Y]IΨ}G}ЯpxLQ|ʌ27|A%A)f6]+C\|'A^$4|XL @"0*N+a^@Ў]nVԶ  yK ;-MQiooB},H_ h+U'++)qJ >6e(1GV@w2jQPri<)o pn \puf'Q@MٌaYŠkn䦂a1_ ۡv! TWh %YHFRQGx;H1qu3,H!(%U hJO1AV k୻! S7O _vBhf_k3Bފ*(kDՒl~*"qʎh C^ڊ V&W~=D95pgq=]g<" *eB"PMj&):[ciZ*;"iIL-ZN*mt]ߢ:V·k8 zaɅdx|wKoWH(zgTpM[GYد3m? ߊ08:c>sF.@0L-} ڽ&(&0{|*Bu3o=/b3ka/$ ZdRA Yd0'>3 ~sOҠx(g =;Kg;nW?eṠ+^jёPؠ%N)I2:cgY1'XqZd>==~dSV1~i2iVxڇ&IlwTA(NLyѢGwK[BrHzuƟ0A>KxW.8dmqmۖO?R[/,šc0?;@* nI+U_y1H2DuInV24>;DriוߘF:#a+ʰDv%I]3k15+#[a5 );V=I`Z1"j84TJt>O%bqkg?B=y*-AbvF #*;B BtZGzT=))5d3zM %5Ol?(KK:&w6H%3iTʹ$D?2>QJ>zaGDljAD f\;'1]ZHRXB,kJOdr&QJn\juƭ(=ğQT׾ޭMY ~p /:XŇ4f}*?tkIʊs$$WW.=cOևs8I{0tw ~ U{ֹycce IW W}V:_H ݋;1:DFYOKrL?i5j?J(˷KèX qѫ"kHRdXd.d̿@Pn'=N>x?V  \b6*\ )̱rޘ&Ǹįy=lG'oLc1^9r¨P;4.?f'8 7 ^M,k_ܔVf gǢe'ԗ$36RO5꼒3S]T~^/Rp\dD#bN( rY&;-^Qos6)a.' W1.nn?"C8ľ*mR-s ɯHDוڮ򹔓Q#δpxBW0!~'-Z=g:i9V_ٌH,9E|*A6!0ρΆ>M/.Α=Vkak_[pood`jM^xI-Z3G_G"9s6R{k^|@@Iw2e<7Ӗ(N֏0/_IA9]T?0RJ7a$_+b4, XߔǵMQjNS_Yo E nc;:(x%I/{L~ӊ^Fw푿.CM;RJlP& AJ =5-" 7ሃ-y>}|'יN39 z?ʢe9~g챺VŌy~@=K>34qCZ-Mc%Ɖ{NL!T!v-}%ٺM [?Uż;J7 %/_:21+m(5>7i%<7PmB/! Ey1Fa Vl$enIBrve4ߐO/-A:TJ2E߄Á%>xx)NƮ($6e\adcp:fP;U)Xsu Ž~̧ tҌ&p,`Č4)+Kv%V>H<S;;k_̀Pagi'3xvl폜A9 0ER)/~s!fK˫2nPTst?n2^a8Yn+hq:6M05Wf{YOqx hW">qGKoTqP d te\}@p 7A6S gFfޜ8n۾uC~Z3}Nj=kW1waԟ/eSX@*2t$O[t`ɟ+s8LE Oܐ9mWo!9G$o%ԡ!W3)s~@ZMW!0oTٹ%w_ P,U#.Jph7@t_w kB@LW_" x0vtw+8EOjw!D!s`svUO0h^cN틖aW4B#r! 79Kr$ Re/Z\}Tju:h_͟ ]q<"yx&V_6> o`\f7ű'B%b\&+cFcjpC_~VGLfM%q#j0 50AH[5EZ ,p򭗫B fAώ َl+RTݣ`&IhzRUGE؃go*<}M9CE+XBa:Ql̖S=8YtUD&k!'}AJ_YZ^=] s!%Wͪtz+:yWAV_dsdj>DBҶi ~C4/ uJA" aC> ySh> x4Zdr޷>MSTªgK2W)V wФ[P~JA jPk9b^a,hc~>88_r(Xz\י昻?N2¬^YRP%eC80҈9 PEQ5opMlrs 3@,~,ZFCW\XJB`2~w|}] ?XE,xkIq=/ 34./Ci0dՇϧ83:BOH=|#3˯G#B~7,i5 |`p]>Y Rf; m_ a> c`Ɖ }mn8E`Ey_Lf,ALX`rI\s6F3d7P.QUYP,3TczI@j*ٜr~B=w|h^CT୊AzVUVlꎕ'd0 D5*mΦҌ oai%}-X:$ڢ: 'y"12}.nUZF}spR8lngG0!7{_;z%^.V$3zukտ'վ:z&Zukdl£#U!F_?I_^sRq sy6Fc"0 mU9b@Vվ*jwD?k e8p遴/[ɋGKzZC{(Qkٸdga>Ig?L4 @/=4}UX;d}ȑi) A"'])|ȁpj_n#̪_r.Wl^N@A&rJ=gq̀]C$~ڇhkoj\|=`/^՛B{GidEZVf_LZc`??['\3kyQѠdk@W 8EMʼnzĠl>F(H岦pQJngO^?d?Aa3PZDkLwHa̗%XgB<_D^zMBa\/v[Q՞~첗wgh,YRIy4W$4y_s NmD (M|R D,YdA&z_YL"ˇh3 k)t%bZ^$ *9GII`(\9`QpOe#n lC\*8ca{ pLJE"'hWUteB$]دCe&bulf|J^n1Ϧe `^EݓDU,ocVB܎up Wr[ػ] Lv|CncO'w°H \B}MGs.b[~1KA@m"!fZșcY(d4>,ج|5hV%f6ϗ˻Y͒AMNNmHN@u1K] G@v( (@"P&'yiU Yba!(\ }'9\lf+e~g|H9El<?fcjzDx#26ntw٣Y{! dɪ[rbX].O['%l0t{"3}.^/M:Ɠ`8CX9iGᯡQO[e1)ssOAp eC A/Ov:V78nzhI&bɏ@Ո̇Fc$ 8/a8{&fµ|X>pzh/紕t{y90meHa$CghMG>{G]ab>ZCLdjO=hBC%AZƨa[o6uuKo@E`ν4{>*8uьy Β쨅i:Cg>6Os?>fLTxl<ê!A@Yb."rw.ֺxy\#\&Pz^akksdA9$pE3xqo4r |•f)ٹoߥ,MC.A[GvcsvRşq$2TZg)(jVc'.1sd)(IW"~עYa%`ClA']^|R}!_ʞ 2 c-h {V Vfrj.1 rd- U1=܈0<>4f08R~r%')T]~V A*~tkh:;#~-LRնypZj~]SLjS)!By9#7?˿eK^-n9)A:ꬵ,s2y3~uO_#.ʆV0>d!u_H2: Jc?N/p3ˠ,)ٚ6[eW}{~T&X#7TdjsrY#.ĿȈP`(wH:S1Y{!5ׄ$~et;#E{!u?T= l\Uus \C:`IQOJlڑT+!"4mOiqNdW㯝ߥbyY!GEG9!>%e7ŴP@ RRE0w׶)|M>[3p^YhV~(@ITh=9 ώ#2C=vۏ% bzQ>8‘W@ܝg j-BQci4r(|yBSaY@.Tء¹ߤC UY4̥d,uX4.F/^" gD,\Zב6Rt 9Ŕ@b k?O`J|~G W)s>]H6AFBY|w611TZKy Y5G~vݸdYicXw*1P\ ath`@`I;H %#*ː%!-Ƚ `f((1 |l@s <ƴNo&`g. V؆?za))ajQtK#%qa);iK j]~dD c;I VW#X[*|#;U7Sd,=:5Vq<֤_ V:y;`^n-vI嗢J+![Yӹ-^\ޜ/얖TzI}5FCr$]iLo]*`Ia$ʫtXZ.m&c:vd4?t9s@ گ5u&{OBue/3C~v6d" $^<5@,]h鄥ArIϜ[[ؽ D PayaB4R|s8DGs~V>G%RQ( 5[becgœDQ!{屯Z^'hťz} J#v(Sl*;\1{Uk2JO cM5E`<S[8R^Oz,nv>7,ccbCt%(3y9ARa$}ya| ^o0ʟ1S3~[96 *T{D;PȮ4rnq 汱JzYO2{'ɪ#WvʸE7I6, iG=bpdʃڂW9Ùdgj@] c쟬ԇcjk(=ciYY2b%:]Z A6UGۀxxFǓWd@ N8ZFz{Eۯ^|+N-zcΟZcajjcAgio;|E}|3A.7xEO )5BIvQ}):VC}RMl"ʹƕNF_1X.mRJ9vbcږ\¹''5臕YGhjMHa W&sďqǴ3wG2Iu )˾:piƯlO8^J#H=/@vAK|00>eޡz<ŲaA; Wy 4@~ #% -aSLuV'pJ;L7޺Ͻ,]c[H-R3g`"`i[S-aWA;vW\+NidQc/%2n߃q\ > Ƥֵ:>.\bކ rtYZD?up\pU*ߨU?3:{T6ϢHLijȁMBpX'qT;0QW"w+@Pb2 LIλ owѩ' * sKVP&Xl,qE'5m~%j]B,xsW:l\s+>zG7C_6  [$ nIP+zN\ v/9B`f}N֒ẻ|m15ׇ13<:u|gb[gW ([0Ƨ{G-bإ˟T5oBK:0fj-ޑ]YT'7)d1Ѡ Q[f c8drGnQܣ1Pj٥PAv_TۘW-;Z6B'dz̘rd ~^Gɺ`H) [` MVl=b51fIB&rz4HЕe-{wzC_ZJOe$>3]fPyҩ#?9E'b]&Vx)ԘrbI^XU´ zT)GxX8ZCȂTk\W～ϙ:Aᮡc x@Wt*ȽO`azD8ˢ!YbayTˌj9V9W2W=)i]طB݆m|٫ֽ^̓4t«Hzg), <"%Smll naܿ0RyO |(eMйOǚY9d}[W;LA̛݇=HIV;juhm?" qcy48JۻWckz9YjǚsJFmRXaouMS/%X^x+*8@wi ~<]V'Ss'69|u`6hٗbFUPr͔IN&EM8 T0CFd[QOV#b%}$fMLत=c/Q8YҚ%+nx\2 k1$0off)vH*n<_̵dysK7 QeH2}T).1 *]sk2%wO\f^GBi/洶'R 9T+ǧͲӛxghƆ \ (4UuV 5Sǚe2'yvzMQZ-;LCNZt֌ hp3Z1NoQ?ހ)bb k@ٱe5^VDﯘGEe hHfwAN8h(S XvʗݼenP6>#hdVKOC^ .jx.x1opMn""KzUsQ}fC8yNq/“BHhkZK}BqЄ9rg }Uqw[V?oC5T:fO`b׃w\gEi.NXF,ܡ  Q)ޝ=9w(s%|up 8_*DU׏eQsQC9bQO<{_O$lcyo0sޫ~ ;2նƉ]3!=FbSn jQPh\LtT;Sڎu=;E)G;`C"X6n4Z}!J 2u'e$oi<%YNU#r>}rr,bUЊ Q҄{3 +Z+X_ ŀ5mLCKqƯfzL X(>o'ʳ.FVD´CI2O"`z`gT(0%/]78&q1ѭ_}qS)Uy_Cn-E $>]蜦˖N3Mp'+uI΂)iҒ_86Ӥ\iHPEOfuQׇ[pq\wXc<7##IFVP5|NaB=ZwG^J.΂ ~T.'aLkpʹC?bs9g) ǡ] Aʊ\dg87 Yb$1ȹH,XS]XӰ-պfj0;Ou^sPA1d-%M҅jU"(NUlI/]bUZ_ME:ÎօJ19C0U7`1.tg#{CXmPtO4I q^Ƹ.iTD eGLP ;LM'17+o:岇k)ɴ$, p^䡘V}_ Z8-ijCr2eAݎ%愲*8cxJ?bLY[9%tz\tv4uCZ^mpzW lΖ9 p_+3fw*ތr`LN٠)T6xTai[!l+w}9>wD=99]1EVXIҰv0 8T;LL\@Ӥ oUbDpzVP|LJ}B} ?}1>!9j*mDi H`d=v#l$Fg|xU#*ʿ"|*1?qu|T1?T} !Wh5bW,2jO+)](%y6~ rӅ $O} PEĺ&PF+n=cܵ~ctomc;\F3@=]R caGBV) oTHJ"dcO:`;x? {kmf$k*ֵ{xdX ,Hyj,%,]>ݤ ]FԨRԶs'sC;"Zk" :Y+d-1ɰ0әƱ,\/p@@| !4ޑ#}A/k3L$**uR0F-FmA7ѺQlA3G~5\c::ӂ(`#>tt:F9e=QфB^ :,P4C-]mB cS6󭲥coCU.:uǃaC1iT8TiC1z 0u)޻66R e080G:\Gqk"qj{?gjO&‹qژ\(2"C`0xsRqߙ>Zi1X19 A'/̷ᄺobG,=fb{@d߲WLǵ{eZfG (,#1wsU(C呟%҉ dnb9I8)u-sLbPw1OQ\RQq^( I%X/NCkZ0u0|,y4f&ۨ5* p:m6l2ڍ|z%\@(LZj>m*xߘ-IM] oLA\1nJ 2즴vY卬<-9 9[BT[L5tU 2l=AJj@?Ήa8gegK֢x$Vg7YK֣P%\6G,7Z6/q7=v gC~0 KpNMa)s]PSLESk2+4 (g..#S"/S;r|y'2!O27Ǎ":#=V ߰7AB#;o€vl MQ:,E%u1 rЉ4n T֦Űcֻ[jMR%r&z A,B^El VlGb9U/TR/76թUҖ/WH6u@kĪNc%HRbY#P-O}#XUmx6Ҏ}XGQ$J $#S{fɻWq{ . o"е" ζI}_Ds2ccиVVc8a~BQ-dV8 ^g8ɸkڂ^;mھ>p:Aaay'}YuZS&:I~͟Ê1"YiWۖW)kQƍ2EIHY\fqJ";GRcyl'Aq\yB;y9=5elv6S4"BçQwmS06o7֍?FRQEeS d+~ jRd@MF&!#4< aȨ.@ (!CEn~jj`*GF(F~:;xr?WSx3܈L !ۏ#حV^(C9xD)C C9XYW:-RV#߫h ;%%{ٛQpxk3yK`AwJTMFFlD\ @CUlEr\W X]:}a84N^ˍ&\=ݧw,:K^zAmxEiVijRE.8toY=xjwѯE\:)| Ed\C}?AݬACUkȉ[KMfFdu3$KEFcEṴ):UmnHꘞWl~JYVH58P``΃+62,Aɱ%o_K1hE1OSlN;Fm!'NMR{,}t[BnT?J$>3j%&i{F?5iDI"wO$#ºӅ2\,{6m"ھk} P)7 j]/^1yǍ7u\i}*%H̪]}ٙA!gz+c#}&fwY&l7i# QZL}oj{\֣65Ap* +cjy볽}Pp\ 7z5K}|}\6!,4L =*81B)+yРa il)|D!;B> Ǒ,kSq!\pQzwno<NJA?6d5ܣ3錍6yp,3o$d@@9 _$y-T LݢJߦOOЂ^@`lPb=ؒ3$ ?ZɐܝHH_o|s[!Y)N e_NI˩`lբ 2eRU? !~RrP~_S<ojwoqcmw2BVǾNG~E6~}}nZmp0EQSE6<0Ͻ!µau7wi$j@qWovE~iF;d$>ma' )ڿS %wwVh?des{~#bɐr?BS*q|УQou2R @TiWНN7B%;M, B؆5Q5 X$GxF,{f |%A"Ө@na)XZ /A{7*!ƍIʃ>'(Qqc~SIܓGqHYDG(-xK0RmC⦊2;q|mp,6&ˎ/N,J2[EFtH6r(O#=,4@XZ$]?R783׻,Qv-k24 vu%\PBW0@%l>4?O%ҫ!$A%rgUN7BB^Z 0Bش|Z\!o\%2P3uEd \lnHcrM:Z}z6,(C"R_zc T qv\Ţ?g7mLVC='ۗ|R[<mc_刬`G{Q2 %M쌫QM͎b`ѐ /Wh̲վWld a2\,+1/Tm98 O|`ľ6njA kdC;kXhZ`oaaCpc~AfBP|O; Lcjs՛šxoNԫcGZMrm| /Gӏc+*i'.,ۦ_RdQ)p45u1QaU_DX}"{m㌞:!qK"3ɞ+9p-1xf1HlquXȼRrԶŵiN;aD,;=M f#MM1ˏf_=WM ĭf3cK]s {t wx$~` osC-E ɑ[Lg섧fbYGiRaYˑ.#a#&U1DIoi#Xj=P? sR7GU8 ."VNU}zu8,NU "A2F韙Krk|O!ѐdbH -o$]CtZ5+^$4qGK+g(T} 1$K9G~IbFM)Ve-F^7&eSJ ][Jufp;w%H.{ }ERUj4UDBd́uNP{5JfDIʩs.eHRc&Y y%O) d-!C^:[m:K[x VwјUw}<]T'4c4dXknd5e;Z]])aCXلE&y^tJj\=&տ¾k0t3qO\e)6BD{i Cݤ<9 J,IB|Mh(/rs#Gdw GN!\1{)7dAT)\jK 3{"(5n`qTYk=d%@e\d욄]3aQPQIW3`ZpIP[!AZ}KnmK--2͗Ӂ IEzH7Pɨ '}};}Y`ȰƊ4DO$(dTP\ya~S+G{쉃s ӴwuLfjȆtBnY3(iUDwx(f"&x[|#ב=#4(ϕjFahٕБ"T𯆑n5;EwKW[TC" u*2ӛvצ]rv lXzQ%hۿRq䱏.i<*rkH'"] u!Ǩfh̀~'U 7kOSW;O%ӣBg'S#`[$X#n6(afu⯘"! _3wQNorB(b$e#J<,RU=o45pc9Vf|Zާ 9n Oü^WT4 7|O1_V2 0SFvO ;;E~xdRƗcQ]ؗ0/^cg8DW0O>AšaiP>ϳPS˒+B$݌ꔹo]YA%VXr%Ge}0VÚ/>0nRS 6_Ƣ[3O4`D布ժ|e칽AD5P@?#9~q˻vN<fth.2=v&FJM@59aOV&~Ҹ JDҜ`u>Trӟ x`1aG '{nT`G̀{ڣB=:aٴ`ez&'rB-?aWίd""a:igW(=rm{)'xs.ܙf ZU,L).6 ޗ=o++ *7):;z!1B3 ᜞pp |LD_w`SNn~׍p0_GJ~SC|DJi^UĐj'\oկsƩ?^=8>H˷w]m4.o9{2>. 9 gƖ.bQm8v#XFЎI`'X&6B#[Ş_!U8o`qYů7:cIbP6';AZedY]ojY9Bh3Ľ-"8Ք;.D?8—do0q%]!JmF|챆;qXx4'E,d%niaZ[e ۻ#򑪢&_9xR{k V޽\VpM8JE`u@3sǐao܉ ܳ!R~q?z*Yga#y).v5ۯgJo,ReE`(lf[p+o#K^DŽ`C $o1n pmQ8jhRگp*n.!MH3 IfhI`$O r8쯖֊֢fy3R.Kf"GC𘣛F] XBEjOLt`F>Zu"VуJ~R;ܙјՉ[qAtm1aL}֟Ή=0sZ/2#?WjhW'BL]?@BMpGQc0uT"0IhӣgyhO4zC8|݁]\/odㅕF͘b4C->#GEF~UoI6 M-KlZ0'I+sD, R1W7Vپ1^:+y.DcG qUGڻGr_-U9CMEUfG<( ԡ$Vh3~ ?IY[i]2j.翂ȁ-ZxKS+B %ΖCNO`Ɏ!Z@A b BvCB;c~2c_  טh5Wx84 "_80):,䫅}}SRő_!w|~j /12)q&SM/b7G4=zګ9RB%ruVQ}xU}m>MǓE*0Щ)ekamѧWR03 7'`X&{q+DZ_i]]bz2վr,6ݞ(/> ?鏌b0s3b#,SWHNi&k:A p*>cuI}4Sj>GfJ϶kfj~§{\禳銃?b3M ~%_69wg{RM{+E=g5om+-vI2G Rh@jXigٞ9v= ]F; d>hM_(<1[# Uc"jއAi#;['$4&2zUǴĉ=DhɥDŽD0"8mJ~x'%+jH ?^YY|7U43t̠oXn=o#db10PfxdO'ԱjA%KaҜ_"8R2m\* %R3Dzqu^\9{4DP?ĉ#xAI?=,AOk4)/&9ؑ78}`cQcGPkmGp1(8E}71^B۸_Ӏ\'΍ h()4gG4]Q(!M= ;[TbV$"K~lJ抖)ޯǵ;(:Im;9PiY=pf*P7.cR]m~-ѝ/պѡ`naί6J,W$dk|DlX(@nЇ H TفGυ=yuH CA|nVHk1VsI) _RW'i8#$C@Ō, %|NX I/t`L^3LUu:Ey=n@>bN/ .(b#XNnwí7ޤpI}t&?9ؼf -9 1k" &C~ ^xJ<ɳRj ، ݘ3\nA[5T!RtdXs]Ҝ){:~׿O\(M̑%0cޜ F{ MxDbߘ,)B0 ^7 })7՗LS aziP+aP~6<y%OBװ?vty?:D>o0cPRzl4nry:(xV_sLiO]JZVLxVmK({^Ln0̒JZ!IR,̺\yӤ;`. VI.qd-q7 90Bq5xw tKCk0Y1N)%vOE9Ժ~R6}a[F)JӣsFc*xq6x?\p_%^#c9ۄ~] ǎt (gF`P f'to@O郕GqL $("4GT,(8Զ4JʽI [$۸ ޕ:I@*uF'nY6by݈!7LLNBn= |Y(3m;rGU+#?7oe͑bcd"!$ۮ,^%c*J߫;Qal1wѰ7bd"9[DLD6PKM9B8(` {wJcw6[gG*0&.;?Fy (;l 6XBvvJz7C>P࿴uCJT {O3϶eډo&'ϔ\Kk^L,N)S(Ki'7ILNIgT,ً43glz;R*{sؘ m&1E27446s!䱕;\H"zaC|$W3W#2@oF={2CBT7z_@F; | o gǏ9oUPuʕ`+RZ|VH+ŽR$#tl^a·6Қ#Cr`4% 2xeΆ˄Ky]Fۈ,XpT#{'YnuyV^bJE;ET#/: =m}뱰f$ȂW;{G+$p-'H|GR CkޯaxdFWznH*b] ; oHIQMnOI=-(Ӊvz]2 &SN"/g̐X^X|e*;I! EN\aM"'qj'e,Hz V@.[c 1Go8rQTWh)x bOmۉaOÝ/OGvgtXD[w\]+TgLg!lА*;&'v TpR$H-mH,K+~[r>@G&Gu!8.f~-_Hc\8`esb5«O5T7  _m*9> kl}띋XTzbNr!|0b3@h)VPvm80\ @I gL1ɘC+ϺtMO}b ](|AXnSBg; nhB"z>\塲¿@;E\հJc֬OH{eUp\w2߽O9hɥvBV U{ewr[ ʦ:l69?4tJ"]7k]KwaImDZ*Niᾂ}x#jr6.V8N P~Ŵ$,OsްU25yǘ5\ 7<0SKv,|2 ςlt 唬MA"\`c>7"ۀx)hM.}aGDw+/$? Ϫ)Z5AJS+%og2 ٻay:VԖ!IWs䏡eٚV:訌^Sak+^N1 } RG?jVԡӒ&Jg˙jV*,f#R8Z"2٤ux_@"z$ɉ?c1Kt䧶1c ֝X%Q0G ,\45- 5WV[αn -7.3:>Bq}:OMkېRV5aeqU-ed5Dtoo M6؏z$-ӼDp)yE!~Ek$yL< \o:q_̯Am_i1T:prV,Fk'eUY$'gXľU8e#r<<1B~N?pFf"feK&=JݪiT^eLLv2rq;*7f^aPśnXQ{h|c-^0t3I M‹J\QqotV%s2jYzUWz'w U`Ծt T@TTcW^咇8R /RWPME^mϔ!xL^I, 'D|*Izuu Q-q]B x2oMrLUP67}W t&^]Ȫ-t+nL)wG|0VW'_}{ƃG׃ i@D1f{,rPn̉I5elU* $ΨD%=\ $@ gF&_P~I+| rbaDFf&(Kg[p ]Y5h;RӔ_IUIڎ.7?lI4+ wWB\&#`nѵz54ύH.B΋L߼ PZ <ʈvlN6nSutJ6y85&8F"F" 1{+"tBeT(xov,4\尧" @D?`5 rHbdP$t:~۴\;b}R, ~mcZp_d ,Ky<*!nw8Q:lP[4)Ct{sn\ KkE:^hZ\WXP j(= +S֜5@F^RV\ӱ,_J&9!~'L*S~v~d2OӛOMr$Ѻs -D >2%&VSF9rYڵܽ*~:Ƨ9y}#殒S/+k|>5`~pWʵC_cFu-44F4Ӫ<2ν->nl!~h"j@ j4g=nS-1T<@~,JF>-wb\q?cUb Fѧ_,IG8ޞ@ȉOPxam^;'Z3/al|)x iSsSi* xpǜ;FNO ^E Q;,=.%'YS+c~TXz6V'XN.@AzWTFdK$}xd P Dz(m/e VDڪ.K,4=WwvY@R8Ϡf6#I؉E@u(W.`{BV0mX#3K"עK]&xQntr?a+nD|QА'+cuF*T7sI'=z HXCmq /]EЉS+3DKY-"MvW i-t˝w- A29|i=$mڕzgbwYsWj~&Sx\+MKFIͅ`Zl3_295j~*jYٜe-%lj{Jf,Ie 4"$um': yy#oT0K^'9.]٧M(7 !bT\M,ϣJI {2wz_yyI4k|H5kX;_QxwΓ!?݌U H<0h0 XD`oES۹U>c| m (e$i Px#$zoÚV]A=pifP[12}^[_bm {sA7NynSXVo>3 tnXŢj P(Jn*>p Kg,#a_3ncx?s2mUh]3"(ṗ)!Jo|OX;fuU;+@Ykn_ah &%#;A:^X]\k"J[j$!c<iJTVåP_⬰+ԏ5#v>ux#>neXҹ=hXcÅZIl0TjX,+sbE Qʟ[ _>n,!%c9:eqt:cJy[TM7CF3az6U^kǎwz~b XknSŵ#8XVbEc`o$inpOi,`p{MBX%G-|SyVDK_,;da o7kb@H,ftx.v:H1*Kl%_e8s(jq~4 rѼC|AH ?LgĠ6%yp.nYIF"xiQCsmA#&@*<> 26;m`p69JFJ"~gP'ezlKct X^a#nH.)5: %ͅCNIVSʶ80X]f8cLX= m`_?\x" {"vEC9Lߛd;4>3յiAQ u4IIɠ22u U5]6 e͊L `15/ڬ=GiS~ĶoG2 ŦQ-%P0nB U7jSI^_ۛsٙ$9m'@Fm>JqH1+ ;eBH͗¤/ -3Y""g1cS"6DT:U`{+@ A3@GfTP>N|SJ"S prp@\;Biy G}jdmY4wBEH n7G=k4H2r6Y(݋ݢh5 + qW"/!â3nA,F>f?O4PWp*% WTD+8Daojy] {n&:. I~4H ~EDHޓ3}|pJ{4`:X8JS`gY3c;iuOS4Nbc &4G^<~ nr?V' '3>_3PҺ&4a\q;cLΣs*zBnw0Bŭ9u Z]g;%>kj-un= c eiN1DŽmXd<:o3™;fZkP3%a|pv+F!گ|L#{~Q89P ν3_h_*lmq.Moy#T@j<ؐZ&Ӻ2đE,Z }6X>L'c/wb-9$}KkWiruCjz NcS1#'>lh$(+А(u?D| ўz@C$%OJ ]B{aw&ET9H$H61-yD7e .sW;:OW7|#ZCR%2 0 t8Lc2@ )}6pK]xug~NGAT0o_˗ /˅jX{F*k:2czws4kJ-+K9"Qw#C"/QW0LδPJɓW2Q"7DC2c#BTx|iidy\YH-%+j|ч!"Ų.B[+K– U蝥_"0^S)(tVcqѓ{veq[jd㸈X$ +Qۓ% {R_} G` A6w奇P#h3Z;:AiU.=f]6?xuG3Ӗ8y퍃F`a|@ȅ)ragjhřtX_jۿ2 @'$S.6)/H9 mP7'ub:jG>+Fʾ9OҍTghݠY=G#(JgfFTn\XP N]"aj] 9=NRph)"wlC6EqXWs*5pįhgbzDLmtyZ;QRWwI#aaW#/v.@@ a)pX$][Cas,H fN ī>XYP+kat Ak_pVֻݯs3*ҁHk?5-"Uo3i3U 8o._/N76ɹ.Pzk^ư쮙&B,He]eB}x4áZ^6+IL)p- "-D i}aý28 lS-PGHYwǘU:,;?`;)2kq^^z:P}^"ruޣ>ȇ/_]-ʆ?;4bV! +ǼVA8ux=áF.Hf Εuݲw}o g}ʭn֍ˠ탌Y/?ǥL;3-FVM3נKiƂ# .ѲƊ(v+Ʃ/_F,3/']LC)|O:륹9()]aޜyE+'uO>pq>Wɕх })Etq %`S=CdNR"?Ooj#J뻷Gߥk(~^}GcWXqgCNWĕ\)Lnj/&>N~Rߤ_(CSw_tTo>#nSkvm_ B!ɵcb l|a /LkWϰ1V`(#wR+7jjB>\K*@l ؘԐm9zw\:cƣL_zs"_@!]m^~rG3ޤz 6KۚVъ:I[ps;eq#?{x59ie c~r@]E +q|?zRA bP14 kKmx(vk!PاLx-j-SL++g# ug'P™ rim+EtcĊTzD[AݕAج4.Eʩ[?H~ kFm3nb >Z64vZ XFp~ij1&E"SWoM'6/X%C=As[$ ")F b2SϧhIZݷexXr`WR)yk&E'8jGuB!}Ö᱊(qd-W8{m:tFl]k p+kldN" "U a.VNX Z p#WTl|\~P u\ydHޒggw/)]ԤsJf625T kng(Wev'Lb95xSgj)Oj/QfwR z.X&;uZ"@i;૚`lhjvݿ|DS^N[JïC533\觑_@ bYsaWyfK*(L/I)?pi&ajS6G \8U&Qq]Zܖ؀~еyH=J6'!o7Me@w0D6̙7#6VJ9*S1MYW)0+Z`8xGO8HUAo*XkD|`P?ź[<{-W bHvAcCikiH2Mq1s M˺S7Cl2_z=׫oÜHӾ},Cn0iRk`zl2ɕ'7?^N%׊; |ŵ=BG_" .;|-?s?3l|ޤqQgXlOG #nj,p9l[Ι "~>n{fO+1g%Ơ`1bkYdF:!M!iV2 Xmn ROhuN}Z,-c쪣'e% Z2,,ςB2'XdžQTbd˳yE'kX?~":X~r>AIù,I,$ &!tc!3CN RjpbfGbqn<.e [*f]ǘstww?p=_KjI̜(0|wU< z~PK2xJڮ*QtW'/7_x;ZM>0Jv!W 4 ʱ֬A$9D~4x ]+~w( /nz5>S[7X& &ThbY (N$F7dʏc: ;0Ï%]=٣3(WZoW@d\:c( D4D>0+JlbUsWA&g噃k U k壥~H >G!3I L9i^!'<7m2|"rN/?XàxPHl*iӢS_4R'a>xtAnbY }ek b<dY@mxj>{@j>lIBrL;qrWr; f}zt AJ4"=1;+  5V?I65aKiOe\,z_/ީFX߲LُXWv^>*Zi%OXhAQe=g''0j`z[Xvy}I3&l9ĚvP-}&|8ab !QK?bjmgk3 i l.+=Y#˹Y4y ̰ O#hg ;:yp|ц1ڙ'-{+ln-iO:AþH߫Nt+Pp^k.~j™Sbmi5ƩW*;L[d e,('$Tr-X'2n4|,AKZ4h hTܨxE/81;2xҜ(=DT&ADzFaLy|DQX9i6_=_f(,nTXEq>M @XDz)@hdOU{jț- "J1|"Dա|,!ҠAXmIׁjONL8^GeCC;HJ'^>,4ϫo-o&KqBz , 1%"kU.?b4/d> <nxk`l5WP,!J#ϓ[:M>N"o|>YJXpIc1Xc7)h=p d;gj|{GQ0uqOQ w*2^7/= c+L.c$ 07Յa̞&秙NT3\窊 غ'59/{0JnI4nKHA@NzF )<[񙏖c>kjlj_hA0m3+"֦ `?gwk6y:'5 hp*&iMtȶ=e)D*ShR[= a6h= Z-$)Y2ajXXtg="4W3sx%aKT{V4:O 1Qݭh0ɘi 9q2ૂql)hJ* $Ar H?{׬x~]'0K{'mqNGەF(kfTAZ !S~9^i@Q7+hB(~2ƷO4 u*#!j#JyUJF:߽bF*Y0Z:csBmez[$w|U]ؓ"h6KeJe1ߦL߼3Ģm=ǸղiׁJ@ht̊^r10FtC3l&͓ڟ~DgMM_Ecޑqc!rþjׅy0Tɜk:N#v2xmcS{>_x mCQR28h}s=aE.3xv\Qۜ#,j.:p | _Zs＊̈uCyLrNR6JDsv%iw}VsA):4^a2k̪?.Yw_ZJW}MIuǭu5a0MIJDb 0CC\AULX"|tƏ|p Ixψr/t626i~lJ[,}>_ƕvޏи[d%3Hm^wH-H]~6,_pya4Sr& "@d? >Ll7, 3ǮjV"☻iZ[J,t;Ζ%,CFݔ\a?和΁džRD#!#C^Y-6,l4#vht=ߪuZt|wuTe|{n%oZm nվLՠFJ\2f22ta& 4@§*DOd f=%n衸A&1}0*`U*ktFk 5oogjxɚ喛A9e^rJW!Xkze"vj ȍf^ȱ̔ 4\`gR,Qm[^1$Z "˗!{B-xxh }ӼFUm;wvE(&7),ß)rvT(|&1t$ %.qЧ/4bP"ϣU8IH4qa#81b46xiNBj^ód@myS|SëRZ}^'*5a{]_'I+qu^`LΔ؉=TqIJgie1 \{%fh|k.Wq= v7!֥ᘋ{$O96BAd/5UK݋z7vwRoE㥝&Da'Q/^&WOP]\W,nvbNoŐ`E}oYP}e'ބ]~20L@L(ך^kİ_ѹk䡱 E&4|Huw{yZ{{M-](j+ÊΟ;a 1-B%tue09EP9z#G8ԶcHPŤov=rlUYCѨd0 g wGQBaPW(gqүRGW^`8%CT*n6'L'`\>.P g>pS´]w) [~kOP<6+·l dM!#@,MN~ٶE7^&O;!&ZR'}\B&F]a4α]VB %Ag*}h5nYgq619jo4q[5\[Ϙ+EµJlNGQZrkF;YkGC0.Ɔ\4q #'SVV浛ډ%D釸+mQ#5Tcԇ3EhyLdZk̦'{G2v̟R@v RFdEBRES_ԣ _V:͗+1+_dRM5ci3k$khfAH_pѝG(9Yw(~3;FpCW+/;Bي{'`Pf-?g ۶Ei/u]c#. @*e޻eh)`YyI/1^h#sYң>G;͚WHDGG0Diϲl0ዸ:rmiB'Vlf~Q4^ߎw9S(!qanom7#HADIu^)5TZ'ep-;e;㭺SXIz%攎JR5SC9^) A㍼هςOui8vIQ+Zrs2}aDJ%/9ilcUkM~2POBkY-K֡B۴ gۯ5oPWQ%Z3QK˻ƏJ笥%q{Re<nYߊX%d]7R)ywF7;PQW&D0\*(Ƶk,E,@K-FU;k1c=Yʢg.Iop{Ÿp)Js3,wĜ7 6qc#{ i.ۅ(*KgkxrFA橧Hxӗ?6ũ8`[2AJk)lӬY , dGK!"|GdLZ=/&IPǙ5ւ~e]3i֨SSx4SD/-GUwtɍ RQwx,RvVHs-PߒSvVH5k/kSPj~ڒ6rAڲiU4уB]w .+Ck+_)XgOrhY J|=[d|g_IP&hfi"u5dh}/$lBC ~#\BY4p*%1\Q3{['|faU*&{$K`R)QSD6nB j܂}NjbDLe;c}KY%/yE,+O^(\WT hah}-XNitǒ*[B(eYY"I g:{]g{oz+=qu_,D$v-9t";{6 dg-UB}w#eUK[@q{D6:b:拮(@47WEUrh@5P^ k*W9pB`7C<3T%̡X&([N&C-yYk=jNj}S;j)CܕyW{QB _3j1ҫwI1j[4 fX E֭0oo:94Ro[-T%6%(==bz W|ۧ|$LՍLa fuq%oT꠼6!4 Iօ*UT洵:OJ+rC Q-]Bclsft7; 3`'8[VBD0E.gD򤇦7vS&`x{-@H;w;߮ct~ 6VRF AH{tBv0hSjGR(nb|F2JW lf( b+%p!fV(֓FwА eq8h g^ Eڱu+IdQ @:"lM TD -s3ٽy:;+r4l&qbF\x߮p57.&YAg1uxn(Fe~3q@īiIQ]cփeعE=FKLA:| x-&ѺƵG5cXd]QT]⋱6ڄcy$X孠P6 ;Yk*CX.YN9$jގ *(,e;t3eχǸ0Q"*qӎC#?+jWBfaw|H+}%0(HO3m2W)Mo/̤JA6Ġk&Ԑ3f8p[{99AJ5)ʸw< {Vpu#ELNac" !N-Lt(t-J `o(mrEw8FR0ǵB7cNRE زa@C>$+ۺ0IRQ ~7/8l[TpW(UR Mހf3b={D.u՗63oӘQJLJW ]*i{5 qP:uzNJ Q]sVc.:c <>'9.M|COKt2sSG21u1jbF|m2Mi(CD+L]9 BsjX3s Q&<ؿ$tUo] ;Wz.HQp;>JxB(}ݻqíc)^wJ^s)KGMj" =%) 'j +,_+Ex96 8 Dl׉bGitRSIL?;ɟ1z֢*wsU۝zUJ[9ƻKEFɣDc[ۓf>\6Ys69Bd,l(+߮ni]8~UzZ45A ֮>~hq?7%JfYnNftEM!{(J8 SPt(:䢅},"{ J^Z`M\0y?gGzzaDTY˵р5ŁNCѻ7`y̗3&Tq4T#jC}bgLBKt0}wA$Ewo7+0D?I·O_rv) SDy\{~DkQY"v0ޘVFQ=5W[۵Olg&א6sa n2y~ZqB!ƊG V Xw:F(-61z74agds#II>Z+P k6PB|f|54i&A[jUWY[3%OQë6ߢa22 lM3M^ǨnmRM+;oGXUKAz;@4;?0#2ٯ|DA0$Vvͳ`lz]V_ ;RdT|ړ/uꍷ$M0^CF)cedle !e7Rv" u|V5>GOnkbO H /ĆfyD_⨨I}v-o߆-_I{:#@l WP#S >?r#kX=t.~|"ckucYbOإ$ïȷYYja=9b~*79ѝ; T߫'@`AeJYl!F^\H 2ngtZ,ذ]AQW=I/q]fO*N"r(C`e 5sm>o/-q8ޟ̶xrAp li\;{h#9@NۧBYIqrѰOv^: ?9GX!7#ƕL餂@&m,"$ߌ `2Ouf p?EX)΄MȐeE] _va3NͅP"c9=Wk _49TF a$:͗kD!9o'E"['xڪxn?Mb01:4XUH(! p4B:AօbkHʺ}l”/cy`C%JZq͛h 09{oB{IԽ=B6 i"vPal2l-5EfO R&g鐋>}8 ̔$rս'ULz?dz"{ķMC!=G/3}OqЃKf&X0+^ o&q 1i6wֶlN`Zk2Nx~YO%bܮ-,M-kZt6cJD,qd܇ңV;ߋ zgW&ʁ!:pF#ZZaUq  9x\W}4( d'9rCw 9|+“EZhKbę?B#c`k:_qy8 P9_+y X6OU=Z{boA#Qc JBt`U]'CX \m+1;@g B<E =n$μTaER'ep&RmE9,|&ZA6&Ac:LsV3,>\2^Ki0>N\Ǒ 5x|nW14w=Ih-A-wFu&n6林]j045r|Ih=<h :D>\qoh># !s.;G9*~9?ǶA&g)s$buPgPmE.ʗ1bw+x! Z`4ĸIe xOG Lj,q`Y SIiJ~zAgDH S\4݈7 򿎽4rh^Hr/Ylqj*7ؠ\+JG@F]vegl=w'AEvhD,hjeKzԈm=^(QhwF( 6ZTk:%D<7ݲC|v9) MɾR嫃S)v` d}8WrH@+n$̍'x1}@Oq5]{Ek58}LK7 %ic+ݭ|n]SCFq~}HfK{$/ Zn`ձ m>YjVUbzr,k܆R~Bsx}#^#TVm1 )[Q̐j(^s\#Co[|BkKGo"j|EE^.B]F;eĵFܘLE! 63BзK XPn=MrI s7˽W3 c½@nXբ|ǖf1i™ uiz;^Ұ6j1糧ƣE% opfjZ4S;+s ѳFeG'% r'G,A4kDe\?'۞6?SD:hݶvN%Kĥs]/g@VzNCV/j{"vIr< 3+$wGor@8g WwYO#%*9 {`eܮcKtH r[QbAK:4q"C6~}h%Jǃ#S %0[5 9 a h:`7'wQ$ML&;KIrXwc@f/]"xă12:\;K|W-e \A\8>v.YX:{=R69x\ *_TUSV]| h:m sq%`w$Rt^S Gq+␳ۚ9GXN_ ַZ% cggl1j3EM̨:%l>6%V4퉙4ְ[W0l!+G=$Pq=^Ė!]L8UܧUuY]g@[=1a"Ϻ:= WnnBQ#KD/<E~7F Fw+!\*@-zl3 RۑW6{jz=]l(cT@YK9ڽPZf@csbckVG|KMynl?Gi2C\/rϵçhU\dz6&E]Rw_FqE]л,VB&V,&wLuO.b%!O|ƳYN\4iYoZKu^9vX0bM/Fڜ 5N)^ibߪ|o$:qZc:jDrl^N6Wσr*X(%G8Tg'3{ ABp3\?٤s('z;}2mTUkfH#4ԇPzzGV`' 6}Zpp ʜekYY6k2|QEkzT ^y}54YX(GՐ(3XNP'm*7xd=x(oIn-?0;^58کƚ4pislW6'W5.Zb5fS)9f\XIGYG3ʜS:='nzcld O ° 8ȑmyO^Ո)Q]XA [oFy^W*UO8uX7Cxv1L083S ?9eѕVBwQmuLgy/?7?agBM2gV1<]HvYP$%׳g2c2J2[@mZ8 vnJ?AK`:Edq-\.h]^@󰇨K\8*R޹Ns֖alL捌$W"8,,*602Z"7cL_ͫluy?r0w>wRe|Lkѯ}IwaTK|D{sQQeO]fB*릔-s^_ޏiZM h]NĢg6_!(,ٸ|+c>rդix>fc/m p۩45ZB\f =Nt9NU` `uG'u#'}}-=DY7EL=j}xʒ*` V5@En$at_рl!sS) :FR=_~ve[" {H4Dߎo(6\iFL23;JC6e cRqL̴dtX%e'5rP|7oH+7ܢ͙V/l%S@+pjʛ&ӑAAj>hh/&{. e@Z:? D2 p"TV+өiSe]QOD47PAp8dNb_Wúy!2rm|UNv,& P3\)S#cG󃅇7LFl[5XIaU+8HIkDb8en[Օ10|Za&Ig,Ih{{?.X=*B*6'jy\&g 8ԞFIB,TīXOH|$(mA0n]A$rl u[WۢFmĮheACN~4<@+%Ʋa?/CF5Q]lY'G>Q>WM-_Wac&69kH^h:KR몒nx-LL<7*edsڋΨ%t꺕 {j6S m;Z>`6g=5>v{ `\M\SI)poSчQzRk:R3пUsR|=1i#ټ)b:y,mqcN4sY:;".]VBB}(^*u=^A.C-m&<2N )Hj6*42( Z,C%cdN. *.Cq^,`>f})dlH/o"7 aEkEs4沧Syh"2ps-1V5U6@7n)ѡ)Ɣ ˖t7Uh\$&w8>cj2BU1~m`9tژ7u0.`;ySa%~[&)Uq۝Qld$0 =B-~{һ|UBo (s{r=}6֢ \xF)Dzoz]F1#u* 8r)VRp.|6%k8ˏ9JEc!O2=;q7p.4:ՠNhB:FIbK Alv!j X ]3Y%b pWէta[!Hxdta/C[Ӛ(ԦAozr~J( _vAC !,wZA91d[bmYNjvG?%DLOW477Ϫl W(;vVHa+>"6Twj~y B;*x& ;A*v4il$R;3Μ6&TOHG7=F8s(W:z9ֆ`Kp)R$Lٓ(`yg1~UOqho#zg=qi{X `Y%Ժk] a3;  J mL %)7JSS vkzJh"8īH%.N^Rioj5jEU!+ # eUk@h IM]{PV-Y*^M%A;7_1eexϨB`I8r o~҇J7o`$đN,ZY9VюYQLj?8.x 挓*VgChࣾH<15|#ХII#9i;jm|gsW,OFx ‡S1*< ߒeמ VU9@L2+%ΪYqD@|B+V#')׭/HEY0S4KO{bx.%0),MЌ܁&-:֧;[٢mvL}OB'2,{hPx՝ka,qۦTN8hv#xV=|`7؆=9YvY&s+F$Qr.@WBh=PiR\'(B|~m:Pv>Ft g &ބ/J絧M&xs[5Prn=ۦlՠKlDDB73>ovV=NkIaH! V8'r1ߥRGW%;Se~Gw4 e΍sA/0CWĄC)ڍDf nwH2Ж]M<:ϻY|ȊYq5(g7Pbl8=s#olXM_YoK'a6ZKP8>NPaD))&+OnB!4{J_\mP+#fgiFbgܤfUvYAPڳZ.be!W3Rp?Z}}Υ*_GeS1K@ PD*kwt#7fKHFMtANG, zcC&SZ\D#V|l0M !4)8IFCNz rE.nZgj HB=x%(EMvW*x@lMT?̈́:KjWgʃWG,Pk$*o(Ԙ<^ 6)̿1?32oFoY*.ߔ3hY]xb6yiK,4#hfTa`~MJ~JQۓy7cqcs3B7-$rLK33(ҵڠ|Vӈ!Y+0~s3BC|L@L "($s{H~#ГMgy@ZA |33ݛVh]yTNhHn$貏,d'Sd7=֋d&٨ncm9K` y8b1*k&>فT_u8a8ߞEWi+|B#H>L-g*bl6^)vjiܵ8*] 2ʙR=QVM3qBOR(yAKd `ʈØvͰ~KR^W5-JDmxc+ĕaPC'MŚp`1ui+с :-#&z_VFA6JgoɗP4*>X)PHa+&_S`yӐ׸$Nmm:Ԍ@_VwNTuBp81P)% ZY_xh&A|>J REL`Unv[/wJ=O"6=΍dg{ o?ldgUU=a>O |޲E 1AZ9TO$ ]S'%֫O `,<+xrG-PyM%@!`ӏ|_oH;`̍ pcpqy+pUzE'f%)uOW ,bf!#>8@B(T(ٟ~1FSm^d(+HI.A]yW1-[OBSRh\w򑕟q~PBYVѹps gU%ZdXYhn|CF4C#?-[?}}rX Pv ,NTONd ɛ.._g/v}5t9_G?Œp'MoAQE "( @54*VCl7e9U>V W8 ˂H)l euWl_vPH[Z;Ҹ< ;6bITE)=mAWHIlbz]3}gC|[\lv8 }'݊nb)[cP TYlj#2eH8[A54U>8n.c2D9K$ `u Sn{h;$S~{UӦmm<  M&h1yE-u]vDJWz"]K9iEPdh BNyx!HTwr^^Ot]CyfΪȍ<:NWA9@_~}H>曾4a=.]5zۼAZi_Pb7ֲ$Cq܅*k.hKSx?rF˩tHi˪ƶr^rhD(sTY&]+Хay Y-c7Ǟ|ȶĄ!p:ᢦYnrO>rӕeZhXڸ1-ڪHOv5T3j#X]'_WL}Җ12vIHsk^gvyeל _):Wq? /|}![W4#_Q9gP3 t=DrA[Up :5Ncg}iƤc$Uv&|'3&OK{o*noެ\=(DK^6]JK[crr4g-U@e9;a9*짻ZQeZPJZ2Ƭ_*yHGF/E @x%js+c|8 Uwqy^Sq<42 0iW1J 0}[B9_Kܛ-﬿VEg\ 68̜ $Q.<kxEܬ^Y]dRNsw+~*!HglOhJDz&^ ߑڵϻ͂QHhs.% :#]! &%=OLq:_xpOȮD!ю?{PP{?k쉷cUҮDL%ȳ8gg)q%D:W۪mzAk>TytqnD.#K,pC[3yT~xs̝"@gACXH~Y.mNpT-RMʑԞ~(q"U&#63aJi:=<Ör#VM :j Fr-™60c$MgnpSM|<;OqM T0bV]A'nWxӲTT R|Sk]BW}L= PnO<E[bA Dbd`JޭW~Y+ؼ{% Fްإ@i~ zƙ-Qvm>lٌ{;<д IBszwoqt. R$0n-mshVu÷^l9SL4"7/θG^"ЈBߘ g \SدeH@nˮĒG *MK&szPuͼ\I}kr=LH4 bMvCǬFׇTW,ǹ/s_ez`PG1L,sYnl.$+%Z mFNa;<4.J`ɎƆ:zK<(P6BRڕ$${I]O}prDP1= ~>iABf,#u"(%q3"殰 kSHvfzP(K15'*W/uA:SG8G\ .]4ȕ31v[ "W6QCZK؂m_p/S'.  Y|! d[[f\3f} Jm/=:$GҨꫨ[=>.AwS,q̃8ڑp/܆ w#Sb5C+ZsX^T~-ШbH1 fV efY@*ns]Xnȋo<3 D3Kuٯz*3M(ݛkn3YY{'j$42k}w|{eJU1dɍgx2Aoe4ie#kRߪwSAG4Ò)L9f#a.$bĎbIg’fVd1ȳX%vV靥x➴4NGnWZEdcu AۗEsa,Z+@0/yTVxl' @;\P.BL3vɛ&SKn64\h0ິuƜHGSU7(*y8ySK\"v΅Wӻ ՘_Y jSi?aGcI1ej0a5Xj& 2g1PL{gѥCaVH%_EZ+4q%4B-Go˖-1?4A -Ϗu7&=q ==r5`{"$m趬1*[|Re NƅUϔ+]&_) =7]ߚwF6]MUr"SjPfa]`kCxs#y3a=|l6Jە;'jR)?zG~L{̐3^N4k A_Nxb5lJ`Fg7B?{9JC@E;s` *ڴ*DL;녃 ѠӂA9H7dkFqt #o|m7e`2ٯKy*bvp]諤M3HNz&IoO2ɦ0_v+|c&P_w?HChxE f-)n׎&1Ey\1r\Oߴݑ( Q7-P2>CٰյdTEY鈊)4[s CX ]3)!amrj&BQHhF=FS@[.-֖v\Lˇ C hP-4/c/S+S!Tf%SuzMv.f*Z}CX@R.CYy#='3|칣UaE>#wy/.>tгGGk|-čZnL$W!;Z|Ȅr\*e 2 SIaൠؒR'6 ?F:z*(/4UYPIvtY$xRʳM!1Ra敖wmk_=졑uN?isa"% ߑ=p*y3wLHV !iDq;oQyS18YE\[tzSRigE\ﱌ~GYs $l#'vWZRHU1PP1˿oP q\8n#N8k\Hdk +"طEvK5Aոw~3 @jdYix"h2BVn2} bNeqhü{ߣ?& ~wÙuyP>&a޵}~Ϙz0>ƅc4rށe/:=86G B!Gԟƴ):>[&Gڲ5lox$oeҥhT!:[;z͛cbk]jDTP $Π+梛{ |R{SӖM]!/qNxSHYlj!&GsV6K۫9%Sl' y[$w~nOA״V)A*Zk|5s=d`s&K,j';>ݏXY:Z3%rЖ8 SґV  a gvIбz*Wl$ )dȊ㜶ym-.gz{܍'Ȃx ]Tv%?A"Z<r5[?'zJxrH4Nnqw #>O:\Wp/Z;T[5Buk2EU_g5 `ye)_z <2cU(d&CML[v̹qW.~\ )c o+ߪFĮ"W\1wݻ_[DͱӤy >h4HG1% (>A$%1w*ScޏD^7=}bw?w7 [lé7pE[*GZdB(mco _ uFx.iJ& x|MOIY& ^JCNfd/v-*Zd [ Ӥ ؼ"HEƲ8 w( 䰷j~=}uYUa~n5x BfQ(Ԫc *Dgb5WQdjUQN^t|?>k XX _-P7݈+SZY!4@-F8 ʫOP7$dxú Uet_F.[ʫ~v H[Khyh_x\ZB4YPbL'/x1Jyp;sd4 #_BVj=a2:COwjcwMYQlf_%q9CKQ&mH˗yf< S[43q+$V/-lb2wQHWZ{4판t/^@CG4{2*w dnѪL#)y DheJwS} Vi;: 7"UB?o.f&,cq/^6OԷ];DxZ2? `+ KJ;FX(VBO:-7%TJtNRy}C|9 zb~Fp/x+Z7xX* E>R2c뭲1fo6DD?u8#Era:^ ~?.% Re*Ko,|Oǧ=trP='sJE`  ݕ bP A/ CFofx 7O:KsAk 0Dq oPls[w(m_I]a5W_NX.UϕGY!X .I}r:P IPܽoXw]5+[ 'l>Wf\TNA o'*G^a|+7mD.?ìr{7YV2PgaB$Wܣ}Z[n qY_VVz#CL|@(4 QU]t5ufn7o AP'mF<)9vnA_nؑN{G& VcTX%ݜ=gp@{C+8tLv ~i)"`HvEl.rkMW</V^٢˪0v#,qyڋUm!I=ٜ  TCWM$Zz`8= q۳8T=vڤ ׳/NZ7#\a= ٓm*o'?H R@n&CDn[$yI$ ɸƂ^L:lRGsOT]a,sҠD_?ycbBnl}Al~u 5-[dvv.M\$ Z^a{P+g_蓆T ʀzz)W΃M3ڳtJ$:uX=m c\t^-\ @ f~^jY9lqm?֌`6 }cFўelxAoN/nRXCQ}2~k\* ORZ5CHk#ӷl\j^H EOxA!37A'&[OYy^}su6Jѓr莏\,YL27q/}' zEE\IԾekU"cwKD=s?" I,7iBB<ʺ q2ؚ&Ue$~h>uIcӅVA{V`^';|yd K*l22T>a26Sh_Wn*WNjШW ݃yƞ"e^eZpWv,0UpDuACTɱ&",=y^1B=n [a<.oC98O!mR"'P|fϗH-MN`uoÍg/ Ξ;Ri3=syƒy1FĿ\Yyt]_0|@pA[ )G I?5HON *B)ZRƵ0 >P29h bN! a/)* f]icyv,FAxFoUB"cVg Vxdt<ާ_Nd:Ola]/q- Zs>SUbC2ÏLzq#~TXdb"nm 'T\`AE~7x @E〶G Ee&dh9<'崎.bNV"cP֌zFYPp_1"!BC6tuxQ0h$㙙asZ@ݛZR-o) dHFd?t&u#S可C'cvǭ>&vja4CGUgWt~|n^j* +ߕ՝lm3h!y9Gwn+-br->!ූGK1k7IW2zȍL5M6;OéZjI Sn]?kT*VUqc9v%t-"WoJRwQM$-lkmvȎyuE{i0gg*?0SyE Eb~° s};z""O %:O1Aaԙ$嫊{o2XmA 2l+21` rͦ'Q2J%|Kͣu8B-8[?'k[qs 2C#A&u-qL9 `La_r{0"eZ0ff-[Sm }n!Ǭ5@G 7=(<[ O9a,6|w 0*fgɠb8{UEFAP0ҥvOkl,&^\wU2b!΄oD9(j8ޛx˸kE چ5_|F}|R(m>* (!e@ ZWrAHH*"i <_y|k*ێ6Do*wZVZ4Zϣhbmؙi* v$'VqaNLWfho9D{ pBAW?" @e8]15;۞ G(HoLY\l0Э)@'izwoC|Pvɑ4RWec㶦z@ٮ.cҚng_q1`h[e/#>;Ǟ+ߞ=J]w!yޗ;0ʣHgޅt^D|}ݮV}[G-CfF$\??\d7 5(wN)3y&zo© uلc#EE%qnr}גECacO~:COSG'DgRW%qĺ2i]/nЏט(Gy'%0Bzƚ{T9-nH2Fٺ x;*Sgu0cDmd } `4E{7[br BRHǽЀa:Ik()㭤~F@7eהQ upz'v2_Lic,gs`aOa:ozU{zP&٭8*0`VtX棸K~ U{%WB0Uޅt,M-_CMD|>AG7;[Ž/A%-9*PXQMygK*BQh-նs9h6>IJ8jzG,_81#V̚ ۨ0Aaec *=м5Ll/fA2aYٹgeToaww@ŒͬO JQQxcj)j^L$Es(N~9=bm ɀȗi!!2qRk ?M*༃w*ny{&0L(Auҟ\̃rHQpf7W\.}P~OA_Qm"낂 ;? pqnǒE:>ÀG%,9Ȗ!Eg?75)<ŵo^{.UZSIA\fSX8@,|pGy[H_hP݂'} uJײ`C+,%} KShfak߸Joe(8'H^MrA'|s ܟV.(:EC [689AbOQWaGM@7g@ZHۂѰ %FU=ۿ<Z.7uDݩhy4] 0IOI37!}0F|zD5 !5Sąr[1Z3>8kFg̏mAE;Y jhO'X3-O FQ5Z2qm~ZպI߷4[!+ǽ3t 3 'T^k@m7rdH-#R∎ /E}sZ,Wc/k0^թG2'ݯRŢ@?5}씣SR6 ) Cyk|H橴ʁ]ɲvX^ 0ߠO&;9n/9$ҵ ,v mKR. I,a1:eXbG>T?~3drB4nͫp/jII%5?Bne3 PݍP"k/&ho_܉UtBvQ@C/n5x0!?de.YHXr@S(z/~ǰ*m`Iāb()*g+t[ߵx1x!5yԀ{^F%X2|)w{p#'&Jq;/+ 1B[|71e77AɸgT ;FbNϑӅi^;hXXH{w յJ9b40eh)pX5U+Ffyx6HE yx8ЧU7Li0ġҩ|Ц#ߘ~g1/%B%#)eڏp@fLiX]3Wۄ ѭG2[+͟;L@le ,7|+a_=N1]a}'+IڭW^ kޖcDWie=kM:{AClVv]$+dBʤ'CKodуLiJ'xL? !J)҈c\ OUŸ=Hwng={_hC* 5'| +[\k[xٍ^I2(9Kt| ׋@:[x*W&Kg*dSӵyJf;L`%C/: =l ǘ2:V'[M17w,/7佝 nZ(|fT%&wZ沿 4Y'ApHJ鄵pxlaQT"dІXuo@r9,5F7,=r6+ӵ]\/K7vPNWO9?ƶ'~k)'l^ xddvAZ| 1B GBd7t0nH1#@J4!^~guHnPQwj(~YݣuWI5NsnaF bù(c=L: >0!K>⿸>YE }>ߓc-vC[, -.+lfʎ%J ;}_d/WcRV6QyJ#\ m<$98~3d:[)H)ppzP$D;+.|d.ub`XI~V|'"dSN9@kY))!U؜ r-% e`ص̂ .77s̭]'~PO͔67 :YKr~P>=,ܩz=Zb4:^w1RyÙ|LLs= el>|h}nE2z,6m2A1&S4<@'\IMiD:Uw)J=K.~9m3$ e}weyJ!BeQM6XTvRfTpEGH E;Ze9kɧ#{(&K# Qš5"Br R  d•gBLq] 坃}+W՛(Rldk>dIMh}![Pw-X e1?yv.df 1g oHi`ڀʆdc&Z*Z dKz /E.w͌Kv֮)Z跻$=c3#\(+ a Nvl}f9MUMRg+sNP6{qd~&jc4u2-LFggRB_{ ~ZZmmsc,hE7yTVy^P~hXx~n"nwrܳ;{0⟌a&P5, N\qo\\X+HOqt|+J MA6ۍܲ2x{`zD<(:_&חV wR] fbDȏr%0o9`r,D!`R82&4P&_ݧ> =Uxt,6|IERZ?xZkMz 6-^vӝgdQYYeM'Y" Ab4Y+`!ߒfـ= cEeaT!HsiCw 0,l+1Btݯ'AI_qW.ח?~hy& ߗ6e)-KnGiYNq;}VY#C 8-I=֞lͯ: Y`( ѡgK>r4$hoʍuXXU# njʆ{)U i\Sb -kNZ%5f%B̤Y&5.WpXj~ zSgM! qjX|hn;&2\؊&7kx9oa81M-;nɛ|AR87` flU *h@g;>RPI˖BU--H-[hB<ռ>5NW!~l dWY;E<]{l OmU $SLdqJ{V&jj ,3!C~E(7 x=}{t۠\1)4T2|#:k3/e5U \--6Ieoϖ#|+hlu v9/N:m2Un s՝Rkh9[P7Ԫի,k10@ɬ֏˿0wbbM#N6߂_NqTssuǼrqaAv*'"mxlH+oi=" (c,۴qYK5= h>akKRL8'&ai8qy]X{^6R3gnn)AI:5`N@{|IzEw(u2'|z%mFG'd>EC |c#ltqG/{$xA0Ing|f)JGSІ]@R0\9Pmvɇ ϨyEL:*IMx%8 M!my[g`dGsyx,w{q|d3?'JZ=gY"3A0JAc*ЪѨe.,͛S7Ա,KZ G{!rU~~L%}]}r>"Sx,'FŠT`]QdV#%,h#L TfuP MX !RŒC >HVXg 7݊ 3`6έuk\ ^-(TrYރ18LGN$l._=c8&"!e C3!e /9{D-@n~ q2{*O'u*6/5K? B+Ig0hD|}io]뤁s FZVT m'?anj :΁cq{S7v©ZuLr 㳚;JQh13ꤼOLncF*Bszאbwa/"1'T\finьƸ!+M{٘;":p%`U37 =mFZ:|a@RSӅe$al 8K|ο(l> u_EWmN8X+ġA 2@m'zp@QDmPr3[`C3di0T ckefuҥX;B-DC6C?Z Ӟ%ڃAm/] ˧`Oh˯\|~6暩i(N ڳŁMs)mK _(e //od+ߍK |~hS3.$즅exZ(\AyM53*"0aMq'0ŝ^ -[W7j˜K7˹6b_!\"k'aFAX8k"Ϛk?+QYQ9|4 ؄鲚WBt*W&*9-ihkCJ2BjӔu]dNBb;3"wS̡nB&yk]b{8%uˬe鵬^axG͉kr%&?F8k}!\&QT8@xzU-|&ײgWu=b{ .?GVg&EI{MM=_l ˾!rfO9峛jB~-. v@i)/C){2Xυާ${nS1MHu2@ s?GC{VLoxZ䈾 bwD<]9.qI-v :x+Z/F.1.5U(@ lP'O K>,H|"IstD 4^WFB1mU@NCqniPF-Qkwx=φMJdl8mriH7tKWS:-(n)R4, 6 WSm&ف|2wRA4g:y*HثJ,.}7h?2G_ڀ[fOHLJ :)yeZ+\?oK`_ qaѧՑtZ;+<[A5ϘBI0$6 7AMD|?MMfWdCh;ˋe)>7zBEpvIF?ru4p;> E?R^Iï̋&np쁒d^?| Z7Sqt;00q%=ezUSmQ\ aOߔP+ Vq *unwUӎw/A4Kjw/vE!ǁ{))5>{arP&-|2׻A8KiN z;U:6N}N$JQ7Nx`b;#=F-:; _,Ԓ @N ,A(LF;ڡYoCD"D!]$=^EE$XxpHN5V!9C,yu>{1|Jh}/ܐ-(AԫA40ZG "7z.tQe _q +OE`(һaΨm=b΂1/ZH8H+SgWQ$ti{74e%mD;Ҳz2b hIyqTAnC2JzaZi(2e#7fOPoOE e~n mKϡ-;QtsgX"tB TqW(Ľ(t3m Y[ Ĭe*.̛Yӟn/T-6<&1\s^-&nƧ_E@9R2ˌVZ޽Oupvj`ԟ5ҿs?[žՄMA?-Ku"į0:JdEV n[\g_cƚ800y3>;(H2l@RY}\,e% taڢs XSՓ $. jBJ%TlsEw|O=!Fh`,f}{fY>%&FH]Z~?Sd1}΂J"4Or2HDXh5?+~D(2TbHݮT$@ڼeE}Zrn(1 Q'סƮ6\{%΅uS]5:-tz6Pwuths8Hg0FZȃYHM1&Zv3{8nV%R@_4eRme/EA>`1jqQ\حvv」:NO:6Zg ,M,oL=c]փ2;2P`9tQAQlbj!+B Jyi jU32;_$:@'5(Ma50Ml)v$OܱV´ܛˣ.J=qܵ- hE>μ  K5 4/GKA#YvQ-/9G#N(%7jZR6Yik&7%^4x1m|Yp8OUD%Ũfe  ʣ>N,)V C;Fa#Zn Vb;BLvW "J/0_6odOʌdAk_.=dl`JRƗvVcBEc| ~*^%ӻBE+"H1=Qx=OȌNu0Og7N ;?l3f; P݋ڴ?#̡`CfU!|F&*.2IiR6ZTbY 4Z2HHT*>Izf9Ot3JκZRV'm{gi㦫UsVz*+Ʋl]G]̑1.THԮj$ǽ З{m 31͓)ج8#Ff`-0ve.yn@$LYZv'=ȟ-=%[x#4?8ܹ4OUT>['W66JF Ex.XX ZXÆIŞW]%p&ZDt?PiP9YXCͽBژn1~3prC|`ΰ?`vK,*'QEy Ǿ<(@ /Qq2X,@Dtu9po^I&7.MC8qdtY&BAMzka!&N&EXkÆ2h:իXj'-@*7Yly)a1~k&ɋf38ߊ!,7>>FMrײWI} ?QJq[쳊ͅ)xHli'(_. R;6='ngm71qhl0;WxykwJ/OÛc|4̤.KW0qjFY~)l(w'6pF|I*AMPsESa5$:ґ8sfRnx6an3Ol_raEdwb}γ/q*Ja$*8sH"gBPyf"Gs&4= x':Շn7ooGZ( */sFZ+N `3Pi4]$ >]pE/u iI=bBoWe$O=RFw~3`bK^JRV=}{L[SŨ o&>gY %6t )O?lӏ^Ԝ:.QA9'pE@p;L>Vt;K81p8m"WBYչ Y'?qqՑrqJTI%Ujo^d"49@j)i-(6mx 8ُQUtc1sI$ByXb2CAٟ&3~(J%,.1*>?KpixCoGfB]gȨwo5PoJĔAipFp BƸІrOHEuNN:AMyEo^wO+XBFlcm߮g..q>L9V ƞ{FTZo$\GJsf2"с{KLzGq4էlskf>;xW  Ҋw|E[=yqpJx JTK*"Z*ʬ`3 ](B8~hīt Ny& I-SgWS:fg ntL4O4ҵξ <|0K)mXMcX(c-ݩ?8&N =lz^ s_F97^Q͇{.b@ JpTDvk2!!0h#ygSCb-Ym/=L б3uQ屪W6G1L~%s-ñ=*qeȆ-|*EmciCKU.X p!Bŝ> \Q/Z }$\x<\Nۻ?TL۝qEdDӮ='GuH\7OR(dDy0'[{; .]X#^7~M^ՉOu:<yal)OHĠ04"6MK-F6qIt񒼶#pin Cr  ?AFQiyJBY d2njl]TpYO觑}˴St&3n0RQŃ<쟭FVvN]=MGaЎ"M>~M7V`X&6\k+,֍<U7C'n쾸աXkX6Sg|jf& 28B9D!W|u'Ghi@U7okie/ۧ :6~6Eΐ'[/=`&7r4Xm ۙO==lZ5v7wS$_\4wSQ-ȳ0J 1t#-sƞc7 eaM5q} Iv>bU}g%g {_rm@.ǭ D;zb'`ԧsG:qi80{u^ yA/S__- u#GȎ>nxȦ:/GC7[ցZfwKvK("2{=:ODBL\Y7w˻},Unԍ _U!ޤC,FswqxAVYqӪEd\)\F c,Ԍnl0uݱs(VKZEd"QdI ꇊ,pr>dLԏfURN2QĨE?}B ͮQLUTL1>Z0-~A5)ZB],6TTMr؋t"Dd!c1y'mqN.5—T€Fڹ%9KWU6’E\K#fXa >NFCg+cI; 4w6gwօ XRR}<e7.HP_ҰeR5FkQG>ԭ?**FٝӑgR(-JKS.ե_Wmyζ ~<-B6*qOǬ*u ^QSW3VsB8be\9F%7|٠4Ӌ:sv ywhz }i]4Jn #H R1R`Z6 #5Kמ;\7Ɉ3+D]>wO@Ik;2dW(OfI3A,` hγ d(G уK `۟q!C9r.B[Э~Ds2!BxξB7#ؾT2URV^%Ɠ;'E6vp'#u;Kn%ёLȲ B ݴ:؉.ϛ;+IN4Ti @nZ3qx뭔Y[xZ=o6zE QIXcP 1'D6M;\7Uc0CS[{U#-K_ߞA'';y[ӥ> B;=F bw^"sJdLC =fv"6>"ύHwPi[0=83D ;ο]2`"!tRO6`]@Q Y"lU@_P_Ī+YBixO@LІe-Z;kjP0#?,J-Ӣd>[$V]:Uy`I6E5^/)D8;!z-nK1N3ҵ_q7kǿ_E =O62jw/8&.GJDU] lm1L}%&-H 9E7 ݞ}%.@jHX^\ZMQ)W> YgcC?T-xL}<|Pdl k ]|4tTlo-IEo@慣X*ܕk* bV-.N}r2B3'@_ h )xt8h7EDe #Ps*;TUj́QI/Mh}6L[+uz4Z2DIۓDCr%jd)I 2W0m|,z4,Z1$(8m-.%P_.N+M"nU84IF \?{0V諶 e=)cl&#4ze1sRkԹϸ9f7k ׵ SpLSӺdP)@%r]z&_z}3%=柜$VJ`x"Z<ߌ΂֗kd丞)FQ+z-7$;82r]@l{FE͚9A/ PTlpCؽ֪`Y#uqb4:hyj٦1nI `1uZr>@J6k)Xz?Ծ4H3|lraj#i 6}EYOH759ۀ(hRxڭ",)C. rIDΩ@S 7u~hR#7Ubt5T%>Bmg`{}]dp[7EKΧ65NBz뭢 e̯aM}@Zn܅%Au!5\͓kߨmxCQ \733?d9hGsρ (Y^*(x5 6XIR?BB񼸤(y?q+19;kJ.7^V+ӨR҅ZQդ⦦'ٝhmF-Kr@# y=*ZT6ix!p ΫKݾXs) q Rt݄bޒHq+s'ëuF6,.y{svM+V ښXb}Ty_FFj p_Ev"3v79\}8&J^)(𬧺Q8tW>djăV!OED k3S'/!s͋8H`IJ)G V9} wLi> d"Zg<, ;JJ-DwK(n- O"XF3~*ӪD'M;1KGt _`w 9_{|6};'qw*wڞBAhto%XiYxd傣Tj*y?vdfGѸ_NѫS)nc:j u뙈zytOɆz9[%+14( Zlʴ?Z׆s r +Pkz"ΣÂ;r9UE?{L#_oQ.,Y!c4 AGD"^RI.RiHb l,րB ;wUcq$^4JV.:Rz"*I^m-X`l]} v1E#є\RS W ,ANbjP*dΏjG|wv.Q:#&LƇֵn#>^QZ`F*"rw&a\$ paˬm9ں-:K}āX?K>*Ƨ4tDmO!՞gM q?rSLS0ҷjNk" Vq&jA93ʜ;^g dVhXuXUߝhA폖&R(J?l'.d?3k77nHwb.ހ0 (D8-AZ33h*c_O0Z?<Ŀ6}R}5/ߕo կW#WĒ(wmc۶WHgŧ ąU&[#d|?d%If|*t>xŊ' ˳ ]n);<TWxv@Hi@UJo_'dbNBK Q(sHK}sa9뺣sy Cb/JAсMJ-||Ӄ0:.$(gTIm4(gG&TBlRg2ĭV7UJa]*C>(l c!? pR,`ro7ؙd^@΍k/1fj3(!hv+P&9țVAGT}Y(_nJ5k mAkLlU՚}aOǏ]k/a/w|Ch!64QG~~.O7AA薢ؤ9т=6x:: {ۢq4tR[b?ɤRJUM7`4JkZXV zlm'}@>zT} ¡unRi)M\c5yҳo1f/?yFV R Uz@0TT'c3㶪dU6Tpђ20ɗ/'X~m#> ?{7XpֺJh}t ΖVDDSc ?9؈uN]IXcՍ^ZOybn0;/9EJᝯ ?][+jAb+^lNm A xO+5;ޜFw@*,RHvTƱYZ|$(MVyI{'ZHUžI&5(:E R{_sm;}?IFPm/3Phn'DeI\W>C]신%,0&fϻ*˞|$xt_Eƌ.uqrrz(Gg#XU.= oEjb 9ugjXېB;mbA(xy;kڤv:ъaMqX&T3\vNT`L0guMA/)d䧯z" #qļoN)9E'%l~vW1fL CNUrf)oow68nC:sL6( ga{Mz& 1q/h\ \_gfm!G)w^ŇiTÊrLy(7iw0y #T|Esd* mv6 [ق6h숶USkb?-ɽDQ8w7eLయб{y֏,dnmmaAy|1:c"CzܻZH=_+,Wʋ.;(F FM,#p#޿F^;$[I|M U\ߚgܱj }iD]6I7q$e2&J=\]H&.u2*;ohءddO{ie}C( [мiUef[4Rx nW)Z*0lD& ^H1Y0iss=N/Q(ł[pkդKx}1ϴTw/HhbdMN7 SIPۢ.h\GBJ)DO;ŠB*c| NҀpW/.J)?. LY??8+Bu[oO[`bO02% 3GP_&}&"v1[ڝ|.*US-LszkGIDA#2R\7ʷ[DC7MKLF,V pF>*q'@{ oO&ɟ+mvhOZҚtFis020EIq @%TAku4 EOK%rlDRƶ/ 7,E1W;a0֐5jL^K,i MteN5%v&ɚP2u7đ~[42{͢RrC"'@z|A7OxזeUՙ+{`Z,2rr]_CIʰܨK  D;IKԶ> 'Uk'|.:He>m pRF<h(r:43a?ey.sfs`]u^o:ik1g}c'Vg5KY]%oVg5Bj_|YtP z@{4-Kb"afaS6c @΢bY_MrV޴.Ri TUHn; 86PMqGOѿ c*Ό_~2ou:MGyqA4J}:7D&6b6)KϏvԙj~e{u`8ǎ_zecSL4VZ(m.ˌ(S|FW[eJh8ߖH TW:$KӦ=OEg.[~=G]V@h doƊFQG1;ѷ1h^Lf}¬{$jW{WBҊВt֫p&s؆tqv5 kq0te% J.E+΋'ej ;fWȃ\V3&bN^WI1aNK\0pO.JA5Ki_y Tg'~Qu`!TP~B}Lj݉kN>uRcrl!;G2 1/YyX6;|@%д_uR(MH}Ph p[[ x*vwŒ($Fވ**<-j.n/a8)Obmh~4 B9WjϤڑXHʀ{ =֙nJi)dT8&=5vE=SoFc ܷ|٬jtEDžMaϼBE- 4!cdZdN D&}SiP;\-էҹ?@C)}%A!(-)}6qc\(Z/RkGn4y(Z[O଎Fvn)-j@-#1pGaK9?:iѹ'S!0J(US5l%$dXp6E;Ns w3jgr&HBdY~!eϸIRs[onqDQr M!*+m v}$$$Rj-g "&vS_?] n뻎U˸*>5_cP3;Er;k#%sxVDO ce^aerr8V X$ե}ʈR5SdF+’<2#t?s c'H |ResA0/;oQ.WnnCEx"Lp|]CR{9`*o`w5 ff!"GK!xU4mP3`D8ccob'PME5{PxAqI? \*omUʧ5L;{\Nm4O+L֏\nlea-^+b 9 W2:==w )ԅvyDQ̀y#pA8XF()=cz>a9CuwU%}/z[?}`i1J0jwh R)p:QF/IPtD}WEp"=T9llr G18tw5<[P!"ꩃf톞W  QKޅG1Q,wpzyXՀE'jMn<"|'Q/A@>e̾ !.߱JyhYO#6O"%UHpR B\ i)|+Cl`#;k$I v=‡̧2,etf%×ENo $/vwXG3D8qoaTοDX%o[׺vJ Vky9Ծ$BJ['cUDbXKϑ˹UJҋe7IAqh@#x%Y\qK p18!r750NTfc?AUj627m 1)@ 7K)PO&-Ne$ T)$/g1S"KZbiVL˛‘P[Fnw=*=xEIkӶJx@v[Ƥ@罔= Xa*pD%|ս+9}x vG7ၥ\uחrNYh8rf:X,vKipGJf2"b;)kMޥ,ä.-ؾݮw=e4d8NJ$s5M_w,M 0b"?/|#(s}_`~/D~Bǜ6 ]L8xEn73+Ys]G`ڽoZ7:.<FѴlz`(qW^1nylCOB\IRZy\\V6Xb=Y9vF˘\ ^[jp)S $ BsD^] I28/~CO["YHw?a=Ofm"V^@'K4=d'K~S$Gʼn!>\h8p+o y6Q56w[XpT4@3qk~"<-lczgم-j<c|YW6~R !Vp?ɀQEXJGb7S~A+VDu .kcfxp~ԇ,|DuaƘЬ8z_R$T/q|L-tdct*X4akg`=Şt~aZ.McTE*zsp[x:.k|N2\Ts6[jlh9\ExJ}&_Ncb,m1Sbsfԑ$=?.NsUr`TSd]5-j A;B}xe UR|VB7 ?3cL  'fPlg`T,6Iy.᳑%(ATASQj+ \fco^ގPНf ߋ- 7pvZ,DP5,EZA q MI)TyBleˢg̙P ;,>MϕS[`~xdK&tyv+*8AC [3kp"_*5g } Sb!HZɃ ƶlK2Z(|LXR5xʵx9SIH)G(+t }i8_΃wURZO7g[w k|eXp5 ໡-%>+4%<:zbޘaŃ {\Q{3ÐLX b(f2{v $0#χ׍Ǵ؊)AX(!+bDhIy#KKe ~` A!0W}>4~ ٰ#kw溚*2ziisZy Ng678h%'EnOδڊ+* ;"lwtv9)ѩ3f_WS KKbk_ȎoUE8dglb8-#j/?]Q 8zAFCąV`U byod1_[3iǎ]P~&6\,(>fIW.I$r#s U%w|z!?dnx8Ԏqqa`ٯO0xZ{s_|XO'dہlQ ųv\Zf>UPbvFȼ_DL}q[ |AX`M݌?qp_'Rd~kt=H%FԳs/o[K#}(ݯ%zL Gilp\cdJ3t@z(Ι&tB\kN m Q4?gFza0hoe]*v =" B.ȧk9]BhϺ:rY5|Dzerc% 54vSԗ}{fߙZp&n&G"G\ <X ICuEwhHcW(Nh[β1/:oHd \Ybe[܄^5yιxyT7BQ 9yzboIZ} mLȩ``eOOmWbo%)Z%Пu_)4<)ak yhmݽ'oQ1DPuT ƟnTKQ46`ۢႂ醆oKEc.CU)u~.G2q?%Om;r*6fPg5o,Й;d,\LKKev׾ʦo\# ,ONa0= ;Oqvf8 @&EM}Hךg2I{0~<~{aaq 5k][;e;QMӼ:g+DGp&?JrU.~)]:pܠG~ɝ$\eF˃, Ke(XΟ@&7BSޛf8"[oHF"_d=g-hvPԯE=aTZw@kjD DD 檂-N$<x/dr#JgY^bHB _?RFVHI[i)_ QT"d%tJ@|r1*/-+kj{b<,HiY$ F|v\?e8PP_!yp7Cw+nhb>F*ƹR>pY lsE^!jzy.+ᲞvЈH.쪐O8 M"13N==$HLA(:)ئ1ӁAHk?9ݜ[`&H6?&P(10=3 %C!*oŽGgH}Lx E~2gGw`0RPĦQ ɉ Mn{Ag"Ytָz[vUZxAIp'Tc\M86& =伫}΂?7E/BVHH}1տF#(KlP)e:Ji;¼Zb5IޞNGW٧pϳy)<<J:ެ_az!dQsC':՚bIAF@#l'd0K;_nst*arq vS? T7X ;{ w%2 ,06"*ss Eړ۫}vhqMہiqt) %ƫN̑h8p\ni LR(#R'խC =ƍQd8ARK; a.Yd-~OjؼQ^ T]k$ Dt-KXT &soqj7Oggb3]I!_2UڹR$cP,{sr34l1MNP>(Pvugf t ,("lbs_Rk>)n`3|[k|"5o 8]q貈$t4 VwR; [|Rǡ-sOS|c3HƥΒQϹyw?3#–YV_,;75wqƻ%3X=eC-6 f]=1Ma_ƍ}R;HQKtЗq/QclWh A&#mޗ <ρ @4#sǘ:{Ol9bS*~SP!AYVG֢~d3UɨaAYU|!ʹd"WȝK){㥨Jj 6w"l$RݛGXW30ET]`==;S!И+\󹛭{r3gNob.Ii:1lis召i [Sd0lgjXM?cWLjZx}c42Ֆ$ .R=f*6 ֞Uz_tA>GdXLÛ\i_ߟC. i-_jyjJ B?lk5jmZR ֻ9JVِ% t?sQ6E!z,#8آgYYv)R '1{<?(T^o]}WV*ax$'~¨w1F:Ż ݯ6hpC*F*/k [(481S[ý3 & * ;gIi78, #L+V+nw.|:)EyC,aR}燞CF4&lCBH]UT EOgksEhp=;zL)ExP%7ʸpdLlmiI^.kоYvj׬o\j2MU 7a'*K"/J}mDGa <0%)A<&\ؙɒ51dhAjk[Z s&C%\_%ƃPl v`7mg'Ф,ok/@L~D#CSܻeCou|Tj qS旘XcO6%9DLgRK잢f : PCd~>ۄ Va̸L{#.͵|=1_i4(~MuMl!u+(f(ȰS=-in[yOw?eå-ҏiSw {*텆RHeYPkxN8Kg͓Xog$le^ .x)ˆ^o/0OeV %hW&lʏL<v K;*LYGXf'Zae.7 mVwN1P7g-RqG=%gqAlq4o`.VvfJ${ɱp` Q&p@- )ffCAv1t.4goHPpۇ!-P ɱص~dߕ8$0k5$am$!Q] Se^!y^-ɐK=tv7SW1Q!a`%D#d|XlEñsڰG*fBKcˏx3;ܚOUcm4I@ \g`|xzjPj*"aӊ(uhe"_brZؓ~=9+cb:NDz0YxzhN7ʅM** qȝH6'B:dREBKEVՔbUfYs~ IL?egsB,-)7Y,(:^Nf 4 .PPbG̡l 'b:Q]vبck?}gAx!lsb`jg_ ^GyNdDQ=Pl>/^G u YzyF4MӡG(TnZW [ k9>ZʄaLSvzê˵^ާ,.`S8u9@i:'H.У^I~E{_p/E6uE~~Tsmɰ ɦ-^`]i3Y1gى4>nА{~whO"WDI@2fY&m!+|Hc 1V.\j% |-?ŕTcRHJ$9V44V}VgU9^ \TS3s4pj!98 Av,!(">dKs}qQ/]=(}SYT5G&h ~iI:h%1&Q`uEy3wI PClԪ+?My[~A7 l@`iFwQ ̓cg]wpQM25YW2]cK{63䰳gB#Te:bE5 ʧ|=ϴj=@7|LRz܄Pzq UM@0lwy塗g;ZqYS(ӑpb̻m'ylT}Vh}?j.='H@|Mf<1<^hP7 케+wjqC{q:{Scz޷f4Oʪ#@ pWqJp=ms;U9gu>ahMk*9bMY%CZ's^l QbƤ;1]ŝ0 SKa "@ᲞтGb~"Ρ uQW.s_]N_/Q} dS cƃ#U>\g#A`@JW ebPrQ@ҨYY,l[ HS-PӉ1-H9ZƓ*ጸZRu9[:Ψe1Q@B=iFctvyXl47sfl(c]ةit>4Sv%q.Zi -G6Z ߁yd3ݗR@ab5=YNfAak%ψ%Qoa|x}aCOrY˪dr݃}A :!kl0?-o~ Շ]ϣiT7TUrPJj^/E-Q.4mvYccwf}ܱuzc_F:sE9l\kKBx?},?IuSa{̑scy菴Kob@^cv uؼ#)cwLE0|ElX8ϔyqE4y&:62_!p6 YQyF5 ʮ`:ކ3\-h .aؓJ6#C3vrIfk&BE3n <-& 3x| 3vTޚi 8:MfT~0'Y .L9.} c0SȨɘ4v:|y 83 (VeP25ۿ`uF/䢌5 z:%-12Б"eH7g;ɠCzga-%qv àI# (7Y tS<̓ Zѷox_]a hjGq'opZoL=^>pD)EV>_m4Vl gnB7QEK:DQR/H:;Nh39 uXt-; n°UȅEѠ*pƏZ-aM̹9ђ<4UB U]{KZ({Ig\N#X%KАv%%%eI\6#d t(j0xyqғ<!rŢ* 7Z4X3Ewů5c$FZ\n4 3HBrZaB;ݑ}~9CX5a$T.BgW0fZ 3k p`0ngpOF'aF3t,c?xeDIjBMȳt:#wP!P?(7tMmR8 [ ]6}P$| bh-j-᢯?_h?{~=sPg{OWEsꒉBMJB-F僚FщX^0G&bM),T>WU / OI&#`D}Pը^m{(V07zn ECSx hl;P:۲&((s[g|n=?;ƳdvÆ/5hnq 2OYAc=urܦ]daT24>𞃉FN̨+}A/\M@TPs'd3opcb\-Kce|B%u//[H\.3=z7Dk_nثt0:"1jPݑb%c]+^o]KDg F "r͝?{@VozJ]cx`Y ]1JD"*Oj@)!\AXQN7x)H%:IGz3+鎱j޶uhu#l=P4Za)L zM‘l M1CuHH7NcHj.Q k? }m ,MnĀT;?)=`ѭbf{uK?']pFmdÏ 7)փ^E LL%MbzXf(-C=0lgkcDP5QbW\XJR*] V;߿1Knvo> ƏmyDPibѿ1!:A%ŕi^LQ!J;E rZ)DfӐ+^ V/ oFK2xe#."o*`rak<Wf)]'HVJ$P3gIbs6P OŨ |%iEn+߃A<A%uiԵ&i d[z6Z+-#gs!CLohg̈́J2G^VY$(g s4+8it #b 2X$>q6n1(MfO5j;1X$eA0e^ KعY3EpmJ Zw,ddb7ñ19 8h|JE=,aP -B/^EܶKHu*SX7@(գGjE5-ј`.-rf]@ֹL$2 sɆQ +{k''9rVv 䢾8JLa $9@^ acn1uW+m%5>WPgFNI@$3cRjD1sxBI]ZzZzHA6UuT^^QwRV*{M~:ltHd74ȃ% ̒ P]#ѫːG?-bX#|a϶w$=iSEFDu 3B*Tņxe  cvwG~ћſ9@H5F:99p9=YFAtSuj 6Iϯ&1rzT7b^|>6B .mploaHT~IJ}]T^Ǘ@$q^@=Ӈ [Ba# 70M qOlS9jI_^7CNb֪HݸuHw0/r Jri/,Fwe1~{2ctb@eВwP }CKQ1Z<|x|)<5JƇQR ]VEJcs(YGL˿/1^*3L$uڄ=MtגW>61m"ť%Gw"4.E0QK *dsa*x];BZgҗ4&+Y.סJ^o#K >pau:#zd0R kfXKF&MQ&C}Fi9 "@ktxfE43n\JivR)r1v${u_\09wϭi듯M@B[پL]S$M-wjT?<thYe-JHY'Ip̹0*']r@sZ%S"oL",1m\Jb6QuY}ժJ&[Gx3[JlN![t s 4t I_KyR(!P)x:79z~Wԫ:UV7  z{:`)TȒh 8W]lis< -P0 r^+(K`uV9X.rҋ>"<n^Wr1.Z5afIX/1%V6:T}|HLs]׶۵4K>si~?ʐOnyғM}P,fp~r.דǿ .ta6\K܆Ǝz1Kz~RRFvx1@T\F(iC,1̘~B$bgl^J5noCbWgLoR~QzN٩>%;!̎[fXA g׵MuwgK&d,9H(s8!*hmMX} Ŋĸ 1Z|G]6#m&9UCR"*GGsBGhʜK%NDCv5ESq~71O5vqMlƲCMe6> #b #1R.dkP6#2dEՇ$" *39-ֳ&>t21eJHczݍU\@hPTmK>fa`#ᩣ_"&Us8{&ZkaI!+Vߗ:q) hv>;YM+A-zpΦ߈V`&q~Yֵg dRj$D-#=>)W f|ɣ dz|;~[ȵ`-BlAu8?57I)RDlOΎ6\c|E{:[oƤ~dk)kTCKhݞEtSv6,fٱҝg>m~o"qt@r̽nd؈ ;<y5ƕOZK+3w) 0BAxXE*~u#B5bFƛG%},P#47qF M J@I*3)[i툟|\yj:;%y -V/toJ͔ȷb:Zӛd6modX Ii;0j˥U/815"CRƎTE)O>`qeaPLZoO f %=quUhivj~`bý͡n<, o ߢ-v\#zD2o+Mthi-C_AY4Rg APbla#&,'e63n j$Q^o`@tpڒř heC(_"x]aPc[.ԅL;z"E1#a\3:⠸9$X1n3>s-OBq&ɈHjߗK ^A%b1;V!x/0${e[1Vb/.8s[# qRְSY  jN K͔ޚ-YknN[b&.ېW N~V8{ire^QPiKCW>@ZPtJg7ko|>D7 8K\u3L7kSi3ht5d({Ë~=H-Dr`:81?&to_qז2pCpc GF)n)BzkxY ^?L'`w.\h9"Q ?dvŲ n%)$K>ͳ8ӜxOR*ƫC T}QVg\3Ւq4¢t $FQ'VTAl2ҹb!W +#rT<[{ qsdU`- a}?_ŠqGD lϘiHm{Z:+Yq\(Rle;w ՘>xM6e."ZXԎF$"$DO/zh3EMD3 GCS[tSBP%>%g+ܗ1>-PքQ> @ntA9GJ?, '6 `k0^I0R넫6 ψ+~긊t:x8GA]`6=eŚHhhѿ;'G&Lf a>;}] 0 bߥ= m>T~_l]ˣ_{r:Vw(F@/@ tM9@}K@LҲwʍd({.iA$'.&UR" "w  H<6λ#n +UVlx)Q>IU_J~n 3*>FtoS&&a_3J65*L>jee@z̞S͢>衋 Y]A&@U(/߲5ai6CiD͡EwƍÇ&vyI )}CQԜ;GC$A>Ri1nLioug(~/ ZjP3;[(7̊R$sQPy<ݏO*myBz7s(uG,vtoZFxQH/Ȼ׮jm O`;P¡RWz< _ BjE)cHXt"$mHF$F8/y֑ͫDH"Kz8?_%::{q\kr_y{$$(N'R~󻞻aS[cJt=L z{ @ HbJckPJl7BU+?\D|F'O)6kkU3^c^u~8+ =sP1H+"1^c#ydC"&"EBXg&H.ǁ-cA)|LIp+-K&]raP|gg@cH???λ9;դ#m_}rf1C6JQԟ@dAw'2v+Vڰ~0(e"J/I<^5BYMm6=lɫ<R]SH<;xr~hM}_$#HE]}ְ =1چ0'`UIh1}ڰm*ے%V (9 ⿄Dw/kIH*{(OT뫑)c}m›ʎe{<`B;UIHSB+"oX\_5n~-DM.pr/4PrTQEeߦ_ 9+n@&* [nZFZ5Y%_1L4zqߕqGk}GQcȾŢ5)I˞hC,3G_ubfQ3dh!Dg ͙tCHDp#ulE/U8 ^aA> ٘xd/OfCzxfwOK)bpcvm["mV1ԺT- `?ݴoGeiT3EPM! *V-J^Nb[}&ٍY|U᠛/T;4!+1&oSUgeN0 ۏMPPu! 5з]֘5WЖ4GlFil $sL9j0AfG, {r| nQz6|49ã ^׶cמ ?ڐ1z @^mݮڮiX:IQgvN}*]B7]*Εikkw|P,^aL>3sT(ԝg|͎u{6 _ʸ@@QYVQPj.H,3OD4ϕ8[tN8Zqp 15c"Kfm6cU3P=1Eu UT7>rjzNm58AGڂ|ytg =vpDR>C-pifV Xc5T[! u.Zr=ٮNsq s!ß$EY“䮻(Kbͭ^O7}Oa ՝բ!C-ft8c+^^J ī^Z1,Bmޒc@糖Q#hgJy #!L6,ZIsK"{-IFzr BM3GqI$8e!yt]CHڃsY3Ul^{v/YݻIp" mXo@>wp}b{"G$u>(7_M㙫&z~~ _!->P8ѶSM 48`e]t@2Ys>qկrgp}U$p#%bmő3΃ ^pk\ezu F4ɠQsҲ ҃FSqqCA韯${ޭ{#`29fTS ;NwDNR?R39L_hh:u  Dy2=y38df4@sT ]a(̵,FߥDf菃*"zsN_\%RY*{zN3f#]Uӛ˖yS\'WwapP`7׫omɀ`Cҕ}@Ur4Nq`:m/L$Y uU`.̌_^ ezBR&GHrr1QG qnBVP"`(WPk0cIޯvǞe.h]c#`N 8ϫĸ|A}9Qm,]ί]@(yCzq_da3ө?%تlc\10SqqSM>XTcX}%1ygd!~u4 6zN{tqPg"0$Lss*;`aA'#TPlCU/8c`ZgIFm6cpvekN{v9}#ԭo}xpՇŘn=$]|wSeD>%DUmmT _s"W> \g| <ֽLi Yz'Ș&ߞ.E ̱|PưY_8[t3R%ckXzMng2l<۾V5 Eon\f;Q-އCӸ;_p߱Ы=r(.., clF]ʙ4PKsMfm[ZGttWN9x5c>xوaH ~%@ޔW~hysɄS*Է eZ ZIg;A?l ɼ m4rJ§tGO33[w,iR%U[1+ G9 WixK!1^3R[k)ZdSF1I@!â}tHid a<iJ d"Mt~:ۣN"V[V"mmN&]0=fϥS|Jt#Ebt wĊ7cuб('TD2!Aׯȵ5<ɒ`ZEbء58h PPȢ k8q5L'j8%|.a;Nܼċ-pI~,K~ :@yckq<8 IJ6!Y@Ú)=%.bnqBKe1ɪ@i}`YIPsѩB֫şQas:x 4߮`S?h=D,E7D7{9j悎[S+)˂5pPJe'鿫0_YZ G\'MS(Dɞ0He$Wo%JU+:Qq5i;9A Z ؝VEkՋ~qR1U䋛7]SD**dC Do'.vʳ[J06EzRŊ?| 7̒~7҄\:=wиG9i0U],zvπ],S;J ]F`2JצRt7W޴sW68N)py]iHH>=s) >ONt``L8ecg~)e}حͱĥ?&P_Zf% 3D @<8g)(imXs75Z׽=c~Pϥpǩ隐%F|9o HŁ/l e^O VG#c߯rm[G 9ljr4e$O8N#- A &5=EA)uܬflrÐe.5C0lu9 Ib9=RAG^zZCCay ]eiDžeiyZÐP؊n ("PGvVh `nMha>֍Yr,1hɔV&0M/k=Ȝ{:3H)K>v9s@#hlvxܕ*'TϱK]4^U[MczUA| %]B0MHq+]GN+G[+<"Eu7ND*swx6/Nu`ែ`9NT=S3. gm?l9@L3 &/ Ͷ/~E FYJEs,۸iB*Wd(Ӻ07-jV8 L|@K_ >RG$&9eu2 ˞6d']s jjԵ53®?Cé=j嵗xIF.5l<['9;k[%s[JcXXܘFbȇ3E UH DW4Aq;N k1#uYH-/kÆ? MqATݥ党5Rj2G{{|S@kiUqwuI`jmCE'q"Sº-7N7 `K¶a!vzv2Wxnyj1,4XQ¦s/ZQ.0 "JDMEߖ+71Ц<A&7J EE\=|$%̫G-)act 0N-d)ƌS<߈-ɫL\ZPF$FEzW#ZִXl CЪ^טijc:~/&v{*X ,c cf7+xn돧HIȎ57nRw@`NSO+r)n٘º^lCxsDPU &­A+qЍwtfpђ).\KtH? hLm8EP&n5$(dlo(̿~ҳs!E0KdzJet,L2Ꮍ_1 2,#jEGF=/Yz׳?Vh}Xo#2-K R'5OxA%J:N\v_]1drH{»xNԶ? "3O(;q"Dߊ5DDN2ZJy6rʠ/UN&qA8Rp[$̌CN7xHO2{ wy4-v,:_VwwNtxa:d rؽi[Q87C} !PQi1G'2Q[%gj)!(÷'~kG-}+w޽d .O~z޳^wZcV`! ޜ [Ft]l?k^!W6sĤe …?EI}sa[Y,^aV2 ߾)_I&rYP QKānV/ W͈\$}Vc(r څjS:ˁ}n䶰`ޑW#$cGçEӎvkQ]ڛG!ueBR͓CY-&#6O&!6P'K$̰<ٜn׿Yv!"{5l.yF_ yU$ D B^hxD*Er,m'.C Cds|+&i%=Hv@fiŋa03S퓦(T|@~1s j H_z6 D;exoBc^#'U9uZ5 e'HdȲ#>t'!2!]s-5.¡a")G.4t,qi>uM|f,/Ed6`>(5Q(HP~!B+4.?k*pϘ8{?ڜEM&͆756ASٹvv/2%StLv j. ZS'0LA.x͂,Me)嘒$r U-C$M֘?1'J,^j Q^ O{1ns'h4N{@;M+%Ӽ0!XuݘԻ0xuw`N`G?ã~hʕDw&I1\sq"6Ux ,d T uIA"^Ibpv~.Ϡ溹!`9DlbkKJ]?h `8`!!i1l\2Bbrt@v\NC}#btI?.=edg*Z͜tHBICiyd]'Ǿ^%) 39tt͗feVp [埱T~T''ssfJUò6ex"n eŒC|FL-X_!D.1B J)TID+@)<*+GB~b`ƦD]@NzOސvS10|Y]q4J {o7+ky һA(uMA5|D,ul͇ 9__9Nay'@Xr;聁к=~hu v 8 Iy4s *rHjHk` RU]rf {cBD7(GCDlh{ \VN`H?5$$ Ĺyt9v!i8;1N "FU~\:xd}ؘ]wz8]e3GE\j> 冖;yZ+ag:akΝ)L*j s)YMnRʭk POZ)]趻6.nJ4er5 uԜ~3˜"c~g|)nM!-jj5Lwރp^&]R.9jgH0<2d?8%b{P< tsN+ :~eE\f~Hco#XRZa{J{0Zߞ0 (MIm%#CI@=e8p>{2 JT2b[&Ǣzs#7ӽ'!x͎1vj;h1 'waWh9>sYyd 9j1jգۘ]( ]3"m:m>H <Q d)8 &EE$@IdȒ_$)@ft71u;HL̊Pc5 iIw=idSF5HSäT :Q',N5iÆ/hqj:1a,] QL8q^ʂ m֘%t2ʰV!h1*],~bӎ8p0~<=GMmH< I9E_ UkAϣ# p\a;\ &^ŠA.~&c@$0/ivĨtPmP望q/ ʁӁ5wx@n׀?vxPz}HuI,@e@qo{jVkf&(Y?7!*?- |gN1ǤǏT͸j68%+I* @$9MEʶؔsFOP dzrˁ zȩcYA-/];8JZUJ:܃1G?|f ~:4p3l(7RSlѹv s0 }KTn{P?Z'[ cz6o7Dkv۝a I?\-m}l#\1f>L#ɘ&JAV,pV3N:[G]aS5E%-2Uh_ĭdCt=(}B-$ƒ|Hd,-oA]a;$ ˹Sz 5ifgPgy.OO›XCiqvmhU<8Κ0#1]p"{\8~+:z]؂mB6)wfC8/d"G&j箶mg{KQK3ҘzW 'nHV~n:g*֯1XN3(BmbERd{oq]Jv$M8c9{tЅU-B~mZJx3fۅ5,ad>>%V G`}&!P $XA0R$ʪs׼~(`O)5\UM*,>ߨ["2r]:ŸښmԶU#.w{FnQR ,¯ʠ%/в]fD?}M9\oGKD#"[a6VVMm8hml` TV3_;7M*nq_XSrp}g T ;6R5UڿsWv=s!!D|ѾMF?^\J2lέ z~lnur "Xzp4t #R^/hlmD.rn2?w;+0%*x-~_ޏFyEY n$%B =~EE"ad+{eSaa?L;pE*m'Y{gP>̮"ʂkR~kNt1L*G0DutmVQ﵊t < \#t}1՗[tCx2="[NîK\{ho4P)B0I1 AF?':bL0XgKm?Q6mw csJݥOQ_p*OtIOAR>$I[D=>FU'YsG G4ioqҊ^ס&[z9 ӟ*^ ס-~m&NlB`gY6ϐHJVTӪvPqQ)ؗH\1z͂R|ihtѺ2ZuB Q}pL}h m5yU͑q:`T%BH&.~BU̓c2ۅ{@ۚP5y{j?56WpPBm+"VE O4 x,C] ລ f9#ōЍo,ڭr`O],*4eWKnpK%+n1Tbj]dG߫aPW:\Jq2֣҂ =HB]{jhsjhXާږv8yvpQR$<@8ic?Q9q_J+Lbe$|Q)7n4cz"^i :ʖ4~䆴 F2o3rwpFZ$iD,Oz L҃sl{EV;2a9q&EʮJL5fZ޼HDj9ZRweo iבN#dt6̕':JG @0"!a!?1CI&C"Sˋ~Rr0,#=8Љ%^LI+ f76Z; x?LılkPa*+NE~rcsRA@&t'dž !W",b9'BWxl]:Ibt&Fm8TĤOmόSkF<$g]Vb^7r-NAW2𘞗fھT~\TKa\Hۯ"csW4@P M7AɑJ4 >C+;&7yzKU({Ms)vA' |5WYNKSdM[p&[@4Mie EՌEYIٔ7() $SJ8c FP^Y!=5܉^%M;-UAQn +NZ8" 5f$E+Aφq-^(GHPN- 7= UpPn6"x/j;Q`xC e`?H 7==7Ar98ΔEJHj坄i?ǪW/I xFFueÃ$qDi[z9o’GLQ"O;(KrY"|QRTϣ1fK7G М)y5$bQh1{yy%nljRy!ˬ'Y|J!۶ؐ eH/,:g uA# ŭ*(##2O Ph`Z8b/ C'tPOHfkI)Eط:aWBwDtӰd@?i5Ǯ@ܕʾmuT-RKIkMn:maJ҈OZREP&KyJmk'=}?tz+,51"~ըC K.7ЎP1[x~݄s=u|Z a?o ʷ$.j#+{b_Tўǔmp{cKȚm,?/r .A|gnkIY Ӵ޵ѯ^3TQ9+"4SP=jwyA;Խ! [%RK\Yx|n麟T=}Ŗ#|m kmaB4LE~tnHiT;BRDe悮_!X$)fŰl~1?,2ٟU R-'bv+ zT=ynt_Л,FmirVZ)>iLހ! ;RhD(&,bzvWj;ޥ*1ZLJ{#TpB H}m]qӼаreA5:$HO( ߠ 3 5r aJM֞xL֔Nc 1:溧An!Y7bRBOʿ2(xjA[5?WD0=;Y`JNQfĻ~]0'{ X8t&PΔGoksu7]/`]k/ٸȑ]"WG_5GBϪiי9Ė7{p?"]Up Rϐb&%Y%l,$QI^@U(R U;rD#=AINZȹl{ ȹ޼x̜δӎʵrDr~'B@m$:⒖WE`{[Cʂ]bjůy7@S{tA:01)[df CEǁeXig *QqXaS s ݵYn&m<כL2-PItAgQcqOy c , Ncp#VT{s4aaO5{ߊ\JZ;QX9Fé|@>aW>)K d"GwA@; RM6HfPepev/׼B[6щ: ʸEYsSIـ" #ҥ|"4/Ѡt^+8hT^[d 64l+rY֎UxhlSeiWxM?a,]`v]uXpɧ wT{0q}d\^ta%)l5S3,#[jNe>' @AL*19Nn`C6J- wGE\MUОxk[ G?σbԅ$mU`=xgNXF` s_X 0x+~/ܲmlxD|5R,yPЁ:̘&G6 ~} uCWbpŧYg#-LU,~:'sĵLS87qSRځp4]`zЅ;WMf.ߪΨH$xA_Vљzf|98/ >_5%WŇ%!Hl&{pJ9ËJ냚]05$[ /hg2&)ęf%ecջ\˱ U]9q )Rn2l%dX(|vr>^T3Lg`^~A%t2 Rjf,U91AѢ QBZ6r~BG@h i|e). jnب->d+H0iU?9<9A,AW!^<)7 dLQ+FJ Ǻ?љ4(n4im%OTjAi[i.X# d%J`[w؎d%qf=cC|S>XT*2zeߒ;m /Vq"ÛE,E*#;!WXj xK-H%#t=N'½#~>\d\f5AI@ΩK'3gOZu! UʬQ3^PGC`]T ᨒǧQ|1߂k] R`GcI=k!0Bg^sJ0^θJ2h~B^?\T< \r n´=1QbցO$nAy]GrCȐFz֦lBXj׺SVv&7GK5[-IZƠ_mӎ3 ( 5(|#rXu@gt>ְ. dI p ObYLX4g@bwƄX& ItͫԠOĎZfEXSVC=&~j4Vc_GP\K:ӈd@dUIhSԴE-p=Q+j(6#P|M8Z8#cIkAљ L}߂|wol>ROAk6V/[,ƉQ1=5tp ƪ5׀M>6 /'#1%DϰDeꆳ+J@Aw(X[*W~wg픍dݐE+l{:ty{sׇyKkg!{bk* @:)@B-+ʯMɲ+B:?}Κ%vWρGO fPD}C\V A,DkU3:]ݐww9nӗG`yXkޗaH4SZ`Kl}Z*$'@zs&+kCƲPwd A_/rʓ( W+ϐ ffN<=aTN@~vX{sZ) W+ȨLF9S|bXJ+찾˂Yz{=*ha5^dOO"7reQ^H?$#(G0*-+)^(=^T0Nc$%E(#:A*uɲvR#XNҤP)0kauפ[`Bnҵ&@>e?kbPUo ~!g.w\XKf&r/H׵a&75m=oH%Xb%RB"E7^|B=P2qx-R(jNm+E>ǦۨnXˮ˞4z%j(SNk b!h8; [^m"vNv1 7jPm tN14}/oLz (y(?'U0/4½Keoчi5xk!'iaX4:a ,. g1[Cz\x *Uw^Խ[96&w^>ɧ23tƈ"H\ٚEݘ2IO#@3pS+ IᑣZt7\YZPK*mX,0Y𬌶I:3Xw%s*{PBL?`*7$vΘ0lǕpϢI>{nYVf0E|i/a~n;=/7;  0M6cMSwhe?/KLg̏, DѐsydI}{X}nMXfXT&S).6P;QbnrK╱zcbWK*ΞժN;6{Xe7I ٻ`$bC+*q-.봘u+d3=;o7s@9ja4T|\MdXjh$.RXcpm⍆ )it$A"܈o{` MctͺR策iS `W5XB䛷 =%++)_9"3kyV->[Ȥ8bNIauYM"eP|#Gi}*Y4۳4N[HV{`?DJ|mgZg| w] wC2l' *0" uHv cҾ0L.V:' ZkuJivq(X jP~+_N`x8 D2`#c/EwBzy#oVX2IJ~+֔*#īgr , v"O"Ey)(2v\yU{4 ys "@~P1{2#~U|3IYmJ4<*)Փs6Q1&#p5r=L Cb]r4D$Ǎ(y%M{ХCn9"i# TDC{QY]ѣ}@VNi”Nr3տt]`_p8IR8@괍akC HE,5IEڣXL};O ?Dq7Z$(mx`?t}SIa!?ߤ^TjSwU]B/`C0E Z}eTT>c@PJ7Nspn=Q:LMd a&uNE8'=ȕZI eަ؀( 'QĉkRտ8u>2]K*1ڗxQuaIG+ZVvi MS위U=T\A{I!?*]'um@\YT3$Js/,MbGH> Z (g15"ۂ)'5F}j*cez_Uc6zjDh{Jm5`xlH.}qi^-WY`L1(@+[kHHh>bLWrx{?6%.#>5y7wB_YŊ{@>X"ɾ x/tbmv|Fa)=U}M}GV&!B ӸV<+ 08`γ.Ěή#OwbzmR`"FOtl]5Sr/ES?>/σL=Eܻal;#Q`p_]qS6?}`9NK >:hYsO~:!p8@Сfnus ZV2JI;1 0 \$ǖ9[?f wg -|<^Gv%l C(=,(Pm r\I.]/Tt1KP 8!w (b{ rX1x=(`<,6X_cAP!˥&:Y\m]k n#-"_* UV>[]4g5S[|Q>!ǀ7PD\1ƌ6vs2.ؙ< 5dhqӲ#C[κ?^ς5k~LNU^ef9L=+ø(Mv PN)ld!5!H u!ɕ]z(8|ja!vЅK>Uq.eUR:2Ri/ Ӟ;g6%fanay"lABXPE6\SKrgakZ̨n4R*hN-2Sp~8'5SGq)>ںxB6 Grb\S+@5<̊#ݣZ|B0Nsxd@ҝ^-|vpΎᾒ IbCGb"%CuDOE)ԉ:V]\}oC$Iٻ@G+ ?,Pkh_ Z/c˝F-lQD0rD H(W+U>^]kr󆍿 ǿp݅9ts狈G[ t)kAnu/ǙN1F` o"WxR) W"Ic}Bx<x9IܚF曔F񃡆"-bx&֛5C`I#ejo |Ҏۘ9:<^5^OH-Z'Q^N)O3OjJx,/ )jSy.6UT> "j3U#4p 5R׳KٜV{wO8 mսz=%ڪ]j^Ս!<5G;ѧgqui@SL@JL,R~rTDZnDLj⁐+;}cfTFJF|bR/3|[v@C^;X1W'F$waF!B?5@ ::1aE?b4?ZT:dncTF L2~:銂i9+K}`CEe!AMBq1|Op>vft>(ڕfRѩamFf]k>LƤC_A+KL94|>1J`MX";-Je>o^~D!J WLTZ[v,JYL9Kɲg*10vTha?keR鷰 ą`hU*J-Q0>>րkdxA7/B5{Bt2UOY4ӄDQ!h1 F!9]/ >F߈5xtR^7b >:c >̼,*L9 AN>/QIf4s.BB/@XMPC& D 1`] (v^2cD \ed̀"J"֘cbpr ׳(\h{]+`luzP7^6wjJYL tأ1xI  Vl-3ݪA̋xLpйS|cm<ٓyCп'*(-+p ~BLbb/D:@'u3 ,Vuٙ5u{Ǭ-Ż8%lՆ׹C.w+sys/^NN)ێ~{6P߫{R=Q٩3D^rH|/,F礭4Cx=MܲtcLYTjF%\ꥊjjpB7z\9S{Q_P$ZIQI>ċ[AV됿W+YdVx7X5قQor춙HWg,#bFGD[.O6W:Œ&â'>d{_lV QUV!) *iS ;WJV[+AzMj0 o:6X5c,*y|  |(5*8o%RoF34tA0YA,B%mu/i}h9?_='VpF N|=8ŚrRB$x+Dcv lmmp2K'EJ>cE5z<޿7a\E#7PYIuMєM tBզJtV-TRCgDu(Z ʤ=טw"zi@j9/HYmܳu \t Ir<2 !pXKCtQp7&*F´b5{>،AųJR% n\9-:&9-gŞt"!>1nៜݬh)/Gv0Zd76ߵ!M MR8UR9 .Vd+KZ^^ >,Q\zu?,PDQA0~*y3۽|f"O2eR3PA fKd٧䥜"GFk(/ZC 'ґC"ثð꼯FryTe}YFQ-&B/c9|G n'NT':ABuruԀ%=q֛޴.#a>+:C4P{#2R\`/҅ ?lN^wLrJZ*}Us` Z8L@+KV{ 9nAa3"/׼7E&&!RӠcՏ߹]x'w/S~8ۿbPot |/bRS_4xclcsUyZXn9ǃv&RӉNfu=3Uދw;.V<֗%XOafhPax_[a'1f's0~n}Vc0XfH^tFs0=>6̀$ 8gIz#5@)q,p0̌[-|`&OL9P{ثh HH غ*2<L.7dd kL1`G 2<,0rҲ`WqC[}tef@nu* H@ĕh=<Ќ XڗVk qry^:Kw؍a$ WX+;6vw~7Mu! T)a'gqQgf |DSZC.앵lyu){Ē;2,t}{ϥ9B>ՉHL@SGkX7NA5$*v#͘xben覜z ~QdQupY2 MNX}e<?gķWV$8\@.;$xQ|?"*]dO1j!ZՆX*lXS_E.5,2}kQF3AX)4M!qkohdl'bMI ,Z;cV *l䬑\9\Iczp1Wk7ZO0eLmO) ӻTrAcLy-DY9I bPBROz{#C| 0w=k"ӔZd8lFij&%!gIVgpUh_oxb3GOIfs+{x[H4tzVu8IO.\ rNϪ? kiU|п,-0a[=:sNx{wlPy^×$mL#8Ɯr5->}M XHt7:jw\nܪ/\ ag˅K!#Lr}poj8:lT|vRb%ΟVh"+U"7&=)@q HMRzmHD_S~jđv\hbdp#^y>SQ>+Bfg3(9rb=]tF'5~Yǿ$XԿZ%A)eo 5E%" $;MAϸuօ|6Zb+uF:^a 6w3! t*GkjhnβMbU8 ( -,u|WGNcyfk㠏`2,+<Q̦]{mgʎlSڶ<[fmAlg„C|Zz{f&;f7MSe>[ɦz1Oς=. /D:v zxgP$VQLLko5Ar)<+č9eZb VWOP>|E0܂\`aKp'NLjaƊN.=C<[$eiĝQ؏{}r$ȵSs|,EC䣛,IS9m(N;'>ODj{#4A@ BLmbD(ti8FV$:G2YT.ͲY)UVKnݠv5gn e݊P?d+KSr:<+rK\79zfT9ցJ:v5E:2 a?A~3u#UIihj3!71`.V'Ҫ,.""~xjXzf@υ/h_ 3MrEފ,X%̢w[xNr0>;5ͳ;A%e2 3M[mkgZ>y=P^jb7CCo,N !#N@#U5~*WCJ2,ǡ@<~"8HWٚ\~-]%1\6ph `;dKjY~li _r?"]" "{7h=g,]6nW4VDJ)I{ )iu?6a&&칌%2x;.wA ?iŸ04R5@bH$ZVEMvFJvf )'e*0mq/=Mv4=> dͨ nf"B> &Զ!hB:IlIK5b'jވwMʵ'5+:S"rz=Px !m{V noaw9@ Cԝ#D0B Oz /=K YZ