sssd-ipa-2.9.3-2.el8 >  H܉e[U U]Y9hQiXHo> s^#o$9Ĭ=4rMC+{.K {Zۥ!1  ݗ8#ivlkl>Е$1\7gC.V*U<IJu1ȼJˋ00J*7/ {y(S^%XQt;lz" \$~ W4ZqTMt 7Q.Z0`b5c^*^N3lJLuxDzH*znk'qA|`V'lWlwF]x0Ma coMC?O: )vWuNhDTsW.&X&&jP_b{OҦTЏǸ[FpHGL?$KA'̳I| @Fj<>?(|Y[as կMd wqH+lǮ L 0_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ȉe[U U]] kctKf'QC2gE,z%xGpM1Gf8`%?Y O]V CC'+mΫ*mݝ YMډ {o%_m߫G.,. x:>l6TN]i(:q#kKwۖTuC'v"߶ˆ0%1 ~>g{/EWOx5㥌;dJaHGf6u.i@7Գش;$`8w3L2O{naQ`VUm-MC3g V6"T[CEMSKZ8FBz" m="D׿)nܩa3<܂r,F廞/ vW@EA:])bP^Q\%g6=y/ ې>`D?d   4 17? . L   4 TGpGGhlq(89P:i^=_GhHIXY\ ]\^5b[defltuv$wxyI(,78<BCsssd-ipa2.9.32.el8The IPA back end of the SSSDProvides the IPA back end that the SSSD can utilize to fetch identity data from and authenticate against an IPA server.eRg&aarch64-03.stream.rdu2.redhat.com #CentOSCentOSGPLv3+builder@centos.orgApplications/Systemhttps://github.com/SSSD/sssdlinuxaarch64getent group sssd >/dev/null || groupadd -r sssd getent passwd sssd >/dev/null || useradd -r -g sssd -d / -s /sbin/nologin -c "User for sssd" sssd(* K"U(_ N)2AAAA큤AeRgeRgeRgeRgeRgeRfeRfeRgeReRfeRfeRfeRfeRfeRf3afb221e5bea47f104aa59929bf8b44ced5353462c3de08493ad112ebc3949a5a90a3f6923d074eb284a9cac16e0a3cc42a3a7e8ace8ffbe4895089629a409bd8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903a3e4b5c75ba7730753236013063c6a723a63bfc950d3ccb2c81c2a19205ddd6579a7a508ecdeeefef8f48f2aa2f8435b5459107aec041177b1725ded96224b67cf3f870f14c480ad01713ba1c026b5c00af5dee5bceefc6cb8de8943f2074119e750b089e5827bc27a816877342faaed49f52ff2f4c60e6605f586e70784d0bdf9c57b5b79f42e6884b943aaa802f0232011a8c09a26f2604931c15f933cd18f../../../../usr/lib64/sssd/libsss_ipa.so../../../../usr/libexec/sssd/selinux_childrootrootrootrootrootrootrootrootrootrootrootrootrootrootsssdrootrootrootrootrootrootsssdrootrootrootrootrootrootrootsssdsssd-2.9.3-2.el8.src.rpmlibsss_ipa.so()(64bit)sssd-ipasssd-ipa(aarch-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ /bin/shld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libbasicobjects.so.0()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.28)(64bit)libcollection.so.4()(64bit)libcom_err.so.2()(64bit)libcrypto.so.1.1()(64bit)libdbus-1.so.3()(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libini_config.so.5()(64bit)libipa_hbac(aarch-64)libipa_hbac.so.0()(64bit)libipa_hbac.so.0(IPA_HBAC_0.0.1)(64bit)libipa_hbac.so.0(IPA_HBAC_0.1.0)(64bit)libk5crypto.so.3()(64bit)libkeyutils.so.1()(64bit)libkrb5.so.3()(64bit)liblber-2.4.so.2()(64bit)libldap-2.4.so.2()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libndr-krb5pac.so.0()(64bit)libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)libndr-nbt.so.0()(64bit)libndr-nbt.so.0(NDR_NBT_0.0.1)(64bit)libndr-standard.so.0()(64bit)libndr.so.3()(64bit)libndr.so.3(NDR_0.0.1)(64bit)libpcre2-8.so.0()(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libref_array.so.1()(64bit)librt.so.1()(64bit)libsamba-util.so.0()(64bit)libselinux.so.1()(64bit)libsemanage.so.1()(64bit)libsemanage.so.1(LIBSEMANAGE_1.0)(64bit)libsss_cert.so()(64bit)libsss_certmaplibsss_certmap.so.0()(64bit)libsss_child.so()(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_idmaplibsss_idmap.so.0()(64bit)libsss_idmap.so.0(SSS_IDMAP_0.4)(64bit)libsss_krb5_common.so()(64bit)libsss_ldap_common.so()(64bit)libsss_semanage.so()(64bit)libsss_util.so()(64bit)libsystemd.so.0()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)libtdb.so.1()(64bit)libtevent.so.0()(64bit)libtevent.so.0(TEVENT_0.9.9)(64bit)libunistring.so.2()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rtld(GNU_HASH)samba-client-libsshadow-utilssssd-commonsssd-common-pacsssd-krb5-common2.9.3-2.el82.9.3-2.el82.9.3-2.el83.0.4-14.6.0-14.0-15.2-14.18.6-1.el82.9.3-2.el82.9.3-2.el82.9.3-2.el8sssd1.10.0-8.beta24.14.3eReRd@dd@du@doMdbc&@cR@c|c_cc@bbγba@baZ@a6aɪa@aKa@`.`@`[` @`&m`@`x@__@_@_#___[@_?@_-B@_@_@^@^@^^(@^oj@^ku^Y^S^J@^C^0"@^0"@^0"@^@^@^@]f@]f@] @] @]+]]Y]Y]|@]o@]k]k]Y=]Y=]Y=]Y=]Y=]M`@]M`@]M`@]D%]D%]D%]9]9]]]@]@\\`@\]o@\\\\\\\@\>@\>@\>@\\\\l@[Ѱ@[^[[ā@[ā@[ā@[;@[;@[;@[;@[;@[[@[@[@[@[@[t[#@[#@[@[@[qr[;e@["XZZ&Zw@Z Z$Zz@ZyZiZiZWQZWQZ%8Z@Z@YZ@Y@YYzYKYyYw2YRHYRHY@X-XX~@XO@X}@X@XX6@XWXOXXWW@WWW@WWv[@Wi,@W5W@W@V3VVVvV%@VqR@VO @V<@V/g@V$@V @V @UpU|@U4@UUUU@UzUzUzUL@UL@U.RU@TTT@T~T8TܕT@T@TTTq@T@T@Tp@TA@TuTto@TG@TD@TT @S0SS@S.SP@S @Sg@SrS!@SkqSkqSG@SFSCS!SSRRpRpR^R[RSRNREs@RD!R@R@RNQB@Q@QQQکQQQo@Q)@Q@QQ@Q@QbQbQV@Q'@QQQQnQZ@QU@Q0@QQQ@Q@QQ @QQh@PP@P@P@Pz@Pz@PqnPl(PaPaPS@PH@PDPM>M2@MMzMx@Mj - 2.9.3-2Alexey Tikhonov - 2.9.3-1Alexey Tikhonov - 2.9.2-1Alexey Tikhonov - 2.9.1-2Alexey Tikhonov - 2.9.1-1Alexey Tikhonov - 2.9.0-4Alexey Tikhonov - 2.9.0-3Alexey Tikhonov - 2.9.0-1Alexey Tikhonov - 2.8.2-2Alexey Tikhonov - 2.8.2-1Alexey Tikhonov - 2.8.1-1Alexey Tikhonov - 2.7.3-5Alexey Tikhonov - 2.7.3-4Alexey Tikhonov - 2.7.3-3Alexey Tikhonov - 2.7.3-2Alexey Tikhonov - 2.7.3-1Alexey Tikhonov - 2.7.2-1Alexey Tikhonov - 2.7.0-2Alexey Tikhonov - 2.6.2-3Alexey Tikhonov - 2.6.2-2Alexey Tikhonov - 2.6.2-1Alexey Tikhonov - 2.6.1-2Alexey Tikhonov - 2.6.1-1Alexey Tikhonov - 2.5.2-2Alexey Tikhonov - 2.5.2-1Alexey Tikhonov - 2.5.1-2Alexey Tikhonov - 2.5.1-1Alexey Tikhonov - 2.5.0-1Alexey Tikhonov - 2.4.0-8Alexey Tikhonov - 2.4.0-7Alexey Tikhonov - 2.4.0-6Alexey Tikhonov - 2.4.0-5Alexey Tikhonov - 2.4.0-4Alexey Tikhonov - 2.4.0-3Alexey Tikhonov - 2.4.0-2Alexey Tikhonov - 2.4.0-1Alexey Tikhonov - 2.3.0-9Alexey Tikhonov - 2.3.0-8Alexey Tikhonov - 2.3.0-7Alexey Tikhonov - 2.3.0-6Alexey Tikhonov - 2.3.0-5Alexey Tikhonov - 2.3.0-4Alexey Tikhonov - 2.3.0-3Alexey Tikhonov - 2.3.0-2Alexey Tikhonov - 2.3.0-1Alexey Tikhonov - 2.2.3-19Alexey Tikhonov - 2.2.3-19Michal Židek - 2.2.3-18Alexey Tikhonov - 2.2.3-17Alexey Tikhonov - 2.2.3-16Michal Židek - 2.2.3-15Michal Židek - 2.2.3-14Michal Židek - 2.2.3-13Michal Židek - 2.2.3-12Michal Židek - 2.2.3-11Michal Židek - 2.2.3-10Michal Židek - 2.2.3-9Michal Židek - 2.2.3-8Michal Židek - 2.2.3-7Michal Židek - 2.2.3-6Michal Židek - 2.2.3-5Michal Židek - 2.2.3-4Michal Židek - 2.2.3-3Michal Židek - 2.2.3-2Michal Židek - 2.2.3-1Michal Židek - 2.2.2-1Michal Židek - 2.2.0-19Michal Židek - 2.2.0-18Michal Židek - 2.2.0-17Michal Židek - 2.2.0-16Michal Židek - 2.2.0-15Michal Židek - 2.2.0-14Michal Židek - 2.2.0-13Michal Židek - 2.2.0-12Michal Židek - 2.2.0-11Michal Židek - 2.2.0-10Michal Židek - 2.2.0-9Michal Židek - 2.2.0-8Michal Židek - 2.2.0-7Michal Židek - 2.2.0-6Jakub Hrozek - 2.2.0-5Jakub Hrozek - 2.2.0-4Jakub Hrozek - 2.2.0-3Jakub Hrozek - 2.2.0-2Michal Židek - 2.2.0-1Michal Židek - 2.1.0-1Michal Židek - 2.0.0-45Jakub Hrozek - 2.0.0-43Michal Židek - 2.0.0-42Michal Židek - 2.0.0-41Michal Židek - 2.0.0-40Michal Židek - 2.0.0-39Michal Židek - 2.0.0-38Michal Židek - 2.0.0-36Michal Židek - 2.0.0-35Michal Židek - 2.0.0-34Michal Židek - 2.0.0-33Michal Židek - 2.0.0-32Michal Židek - 2.0.0-31Michal Židek - 2.0.0-30Michal Židek - 2.0.0-29Michal Židek - 2.0.0-28Michal Židek - 2.0.0-27Michal Židek - 2.0.0-26Michal Židek - 2.0.0-25Michal Židek - 2.0.0-24Jakub Hrozek - 2.0.0-23Jakub Hrozek - 2.0.0-22Jakub Hrozek - 2.0.0-21Jakub Hrozek - 2.0.0-20Jakub Hrozek - 2.0.0-19Jakub Hrozek - 2.0.0-18Jakub Hrozek - 2.0.0-17Jakub Hrozek - 2.0.0-16Jakub Hrozek - 2.0.0-15Jakub Hrozek - 2.0.0-14Jakub Hrozek - 2.0.0-13Jakub Hrozek - 2.0.0-12Jakub Hrozek - 2.0.0-11Jakub Hrozek - 2.0.0-10Jakub Hrozek - 2.0.0-9Jakub Hrozek - 2.0.0-8Jakub Hrozek - 2.0.0-7Jakub Hrozek - 2.0.0-6Jakub Hrozek - 2.0.0-5Jakub Hrozek - 2.0.0-4Jakub Hrozek - 2.0.0-3Jakub Hrozek - 2.0.0-2Fabiano Fidêncio - 2.0.0-1Tomas Orsava - 1.16.2-2Fabiano Fidêncio - 1.16.2-1Fabiano Fidêncio - 1.16.1-3Fabiano Fidêncio - 1.16.1-2Fabiano Fidêncio - 1.16.1-1Lukas Slebodnik - 1.16.0-13Fabiano Fidêncio - 1.16.0-12Lukas Slebodnik - 1.16.0-11Lukas Slebodnik - 1.16.0-10Igor Gnatenko - 1.16.0-9Lukas Slebodnik - 1.16.0-8Lukas Slebodnik - 1.16.0-7Björn Esser - 1.16.0-6Lukas Slebodnik - 1.16.0-5Lukas Slebodnik - 1.16.0-4Jakub Hrozek - 1.16.0-3Lukas Slebodnik - 1.16.0-2Lukas Slebodnik - 1.16.0-1Lukas Slebodnik - 1.15.3-5Lukas Slebodnik - 1.15.3-4Lukas Slebodnik - 1.15.3-3Fedora Release Engineering - 1.15.3-2Lukas Slebodnik - 1.15.3-1Lukas Slebodnik - 1.15.3-0.beta.5Lukas Slebodnik - 1.15.3-0.beta.4Lukas Slebodnik - 1.15.3-0.beta.3Lukas Slebodnik - 1.15.3-0.beta.2Lukas Slebodnik - 1.15.3-0.beta.1Lukas Slebodnik - 1.15.2-1Lukas Slebodnik - 1.15.1-1Jakub Hrozek - 1.15.0-4Lukas Slebodnik - 1.15.0-3Fedora Release Engineering - 1.15.0-2Lukas Slebodnik - 1.15.0-1Miro Hrončok - 1.14.2-3Lukas Slebodnik - 1.14.2-2Lukas Slebodnik - 1.14.2-1Lukas Slebodnik - 1.14.1-4Lukas Slebodnik - 1.14.1-3Lukas Slebodnik - 1.14.1-2Lukas Slebodnik - 1.14.1-1Stephen Gallagher - 1.14.0-5Fedora Release Engineering - 1.14.0-4Lukas Slebodnik - 1.14.0-3Lukas Slebodnik - 1.14.0-2.betaLukas Slebodnik - 1.14.0-1.alphaLukas Slebodnik - 1.13.4-3Lukas Slebodnik - 1.13.4-2Lukas Slebodnik - 1.13.4-1Lukas Slebodnik - 1.13.3-6Lukas Slebodnik - 1.13.3-5Fedora Release Engineering - 1.13.3-4Lukas Slebodnik - 1.13.3-3Lukas Slebodnik - 1.13.3-2Lukas Slebodnik - 1.13.3-1Lukas Slebodnik - 1.13.2-1Robert Kuska - 1.13.1-5Lukas Slebodnik - 1.13.1-4Lukas Slebodnik - 1.13.1-3Lukas Slebodnik - 1.13.1-2Lukas Slebodnik - 1.13.1-1Lukas Slebodnik - 1.13.0-6Lukas Slebodnik - 1.13.0-5Lukas Slebodnik - 1.13.0-4Lukas Slebodnik - 1.13.0-3Lukas Slebodnik - 1.13.0-2.alphaLukas Slebodnik - 1.13.0-1.alphaFedora Release Engineering - 1.12.5-4Lukas Slebodnik - 1.12.5-3Lukas Slebodnik - 1.12.5-2Lukas Slebodnik - 1.12.5-1Lukas Slebodnik - 1.12.4-8Lukas Slebodnik - 1.12.4-7Lukas Slebodnik - 1.12.4-6Lukas Slebodnik - 1.12.4-5Jakub Hrozek - 1.12.4-4Jakub Hrozek - 1.12.4-3Lukas Slebodnik - 1.12.4-2Lukas Slebodnik - 1.12.4-1Lukas Slebodnik - 1.12.3-7Lukas Slebodnik - 1.12.3-6Jakub Hrozek - 1.12.3-5Lukas Slebodnik - 1.12.3-4Lukas Slebodnik - 1.12.3-3Lukas Slebodnik - 1.12.3-2Lukas Slebodnik - 1.12.3-1Lukas Slebodnik - 1.12.2-8Sumit Bose - 1.12.2-7Lukas Slebodnik - 1.12.2-6Jakub Hrozek - 1.12.2-5Jakub Hrozek - 1.12.2-4Jakub Hrozek - 1.12.2-3Jakub Hrozek - 1.12.2-2Jakub Hrozek - 1.12.2-1Jakub Hrozek - 1.12.1-2Jakub Hrozek - 1.12.1-1Jakub Hrozek - 1.12.0-7Fedora Release Engineering - 1.12.0-6Stephen Gallagher 1.12.0-5Jakub Hrozek - 1.12.0-1Fedora Release Engineering - 1.12.0-4.beta2Jakub Hrozek - 1.12.0-1.beta2Jakub Hrozek - 1.12.0-2.beta1Jakub Hrozek - 1.12.0-1.beta1Jakub Hrozek - 1.11.5.1-4Stephen Gallagher - 1.11.5.1-3Stephen Gallagher - 1.11.5.1-2Jakub Hrozek - 1.11.5.1-1Stephen Gallagher 1.11.5-2Jakub Hrozek - 1.11.5-1Sumit Bose - 1.11.4-3Jakub Hrozek - 1.11.4-2Jakub Hrozek - 1.11.4-1Jakub Hrozek - 1.11.3-2Jakub Hrozek - 1.11.3-1Jakub Hrozek - 1.11.2-1Sumit Bose - 1.11.1-5Sumit Bose - 1.11.1-4Jakub Hrozek - 1.11.1-3Jakub Hrozek - 1.11.1-2Jakub Hrozek - 1.11.1-1Jakub Hrozek - 1.11.0-3Jakub Hrozek - 1.11.0-2Jakub Hrozek - 1.11.0-1Jakub Hrozek - 1.11.0-0.4.beta2Fedora Release Engineering - 1.11.0-0.3.beta2Jakub Hrozek - 1.11.0.2beta2Jakub Hrozek - 1.11.0.1beta2Jakub Hrozek - 1.10.1-1Jakub Hrozek - 1.10.0-17Stephen Gallagher - 1.10.0-16Stephen Gallagher - 1.10.0-15Stephen Gallagher - 1.10.0-14Jakub Hrozek - 1.10.0-13Dan Horák - 1.10.0-12.beta2Jakub Hrozek - 1.10.0-11.beta2Jakub Hrozek - 1.10.0-10.beta2Jakub Hrozek - 1.10.0-9.beta2Jakub Hrozek - 1.10.0-8.beta1Jakub Hrozek - 1.10.0-8.beta2Jakub Hrozek - 1.10.0-7.beta1Jakub Hrozek - 1.10.0-6.beta1Jakub Hrozek - 1.10.0-5.beta1Jakub Hrozek - 1.10.0-4.beta1Jakub Hrozek - 1.10.0-3.beta1Jakub Hrozek - 1.10.0-2.alpha1Jakub Hrozek - 1.10.0-1.alpha1Jakub Hrozek - 1.9.5-10Stephen Gallagher - 1.9.4-9Jakub Hrozek - 1.9.4-8Jakub Hrozek - 1.9.4-7Jakub Hrozek - 1.9.4-6Jakub Hrozek - 1.9.4-5Jakub Hrozek - 1.9.4-4Jakub Hrozek - 1.9.4-3Jakub Hrozek - 1.9.4-2Jakub Hrozek - 1.9.4-1Jakub Hrozek - 1.9.3-1Jakub Hrozek - 1.9.2-5Jakub Hrozek - 1.9.2-4Jakub Hrozek - 1.9.2-3Jakub Hrozek - 1.9.2-2Jakub Hrozek - 1.9.2-1Jakub Hrozek - 1.9.1-1Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-24Jakub Hrozek - 1.9.0-23Jakub Hrozek - 1.9.0-22.rc1Jakub Hrozek - 1.9.0-21.beta7Jakub Hrozek - 1.9.0-20.beta6Jakub Hrozek - 1.9.0-19.beta6Jakub Hrozek - 1.9.0-18.beta6Jakub Hrozek - 1.9.0-17.beta6Jakub Hrozek - 1.9.0-16.beta6Jakub Hrozek - 1.9.0-14.beta6Jakub Hrozek - 1.9.0-13.beta6Fedora Release Engineering - 1.9.0-13.beta5Jakub Hrozek - 1.9.0-12.beta5Stephen Gallagher - 1.9.0-11.beta4Jakub Hrozek - 1.9.0-10.beta4Jakub Hrozek - 1.9.0-9.beta4Stephen Gallagher - 1.9.0-8.beta3Stephen Gallagher - 1.9.0-7.beta2Stephen Gallagher - 1.9.0-6.beta2Stephen Gallagher - 1.9.0-5.beta2Stephen Gallagher - 1.9.0-4.beta1Stephen Gallagher - 1.9.0-3.beta1Stephen Gallagher - 1.9.0-2.beta1Stephen Gallagher - 1.9.0-1.beta1Stephen Gallagher - 1.8.3-11Stephen Gallagher - 1.8.2-10Stephen Gallagher - 1.8.1-9Stephen Gallagher - 1.8.1-8Stephen Gallagher - 1.8.1-7Stephen Gallagher - 1.8.0-6Stephen Gallagher - 1.8.0-5.beta3Stephen Gallagher - 1.8.0-4.beta3Petr Pisar - 1.8.0-3.beta2Stephen Gallagher - 1.8.0-1.beta2Stephen Gallagher - 1.8.0-1.beta1Stephen Gallagher - 1.7.0-5Stephen Gallagher - 1.7.0-4Stephen Gallagher - 1.7.0-3Fedora Release Engineering - 1.7.0-2Stephen Gallagher - 1.7.0-1Stephen Gallagher - 1.6.4-1Stephen Gallagher - 1.6.3-5Stephen Gallagher - 1.6.3-4Jakub Hrozek - 1.6.3-3Stephen Gallagher - 1.6.3-2Stephen Gallagher - 1.6.3-1Fedora Release Engineering - 1.6.2-5Stephen Gallagher - 1.6.2-4Stephen Gallagher - 1.6.2-3Stephen Gallagher - 1.6.2-2Stephen Gallagher - 1.6.2-1Stephen Gallagher - 1.6.1-1Stephen Gallagher - 1.6.0-2Stephen Gallagher - 1.6.0-1Stephen Gallagher - 1.5.11-2Stephen Gallagher - 1.5.10-1Stephen Gallagher - 1.5.9-1Stephen Gallagher - 1.5.8-1Stephen Gallagher - 1.5.7-3Stephen Gallagher - 1.5.7-2Stephen Gallagher - 1.5.7-1Stephen Gallagher - 1.5.6.1-1Stephen Gallagher - 1.5.6-1Stephen Gallagher - 1.5.5-5Stephen Gallagher - 1.5.5-4Stephen Gallagher - 1.5.5-3Stephen Gallagher - 1.5.5-2Stephen Gallagher - 1.5.5-1Stephen Gallagher - 1.5.4-1Stephen Gallagher - 1.5.3-2Stephen Gallagher - 1.5.3-1Stephen Gallagher - 1.5.2-1Simo Sorce - 1.5.1-9Stephen Gallagher - 1.5.1-8Stephen Gallagher - 1.5.1-7Stephen Gallagher - 1.5.1-6Stephen Gallagher - 1.5.1-5Fedora Release Engineering - 1.5.1-4Stephen Gallagher - 1.5.1-3Stephen Gallagher - 1.5.1-2Stephen Gallagher - 1.5.1-1Stephen Gallagher - 1.5.0-2Stephen Gallagher - 1.5.0-1Stephen Gallagher - 1.4.1-3Stephen Gallagher - 1.4.1-2Stephen Gallagher - 1.4.1-1Stephen Gallagher - 1.4.0-2Stephen Gallagher - 1.4.0-1Stephen Gallagher - 1.3.0-35Stephen Gallagher - 1.3.0-34Stephen Gallagher - 1.3.0-33Stephen Gallagher - 1.3.0-32Stephen Gallagher - 1.3.0-31Stephen Gallagher - 1.3.0-30David Malcolm - 1.2.91-21Stephen Gallagher - 1.2.91-20Stephen Gallagher - 1.2.1-15Stephen Gallagher - 1.2.0-12Stephen Gallagher - 1.1.92-11Stephen Gallagher - 1.1.91-10Simo Sorce - 1.1.1-3Stephen Gallagher - 1.1.1-1Stephen Gallagher - 1.1.0-2Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19Stephen Gallagehr - 1.0.5-2Stephen Gallagher - 1.0.5-1Stephen Gallagher - 1.0.4-1Stephen Gallagher - 1.0.3-1Stephen Gallagher - 1.0.2-1Stephen Gallagher - 1.0.1-1Stephen Gallagher - 1.0.0-2Stephen Gallagher - 1.0.0-1Stephen Gallagher - 0.99.1-1Stephen Gallagher - 0.99.0-1Stephen Gallagher - 0.7.1-1Stephen Gallagher - 0.7.0-2Stephen Gallagher - 0.7.0-1Stephen Gallagher - 0.6.1-2Stephen Gallagher - 0.6.1-1Stephen Gallagher - 0.6.0-1Sumit Bose - 0.6.0-0Simo Sorce - 0.5.0-0Jakub Hrozek - 0.4.1-4Fedora Release Engineering - 0.4.1-3Simo Sorce - 0.4.1-2Simo Sorce - 0.4.1-1Simo Sorce - 0.4.1-0Simo Sorce - 0.3.2-2Jakub Hrozek - 0.3.2-1Simo Sorce - 0.3.1-2Simo Sorce - 0.3.1-1Simo Sorce - 0.3.0-2Simo Sorce - 0.3.0-1Simo Sorce - 0.2.1-1Simo Sorce - 0.2.0-1Jakub Hrozek - 0.1.0-5.20090309git691c9b3Jakub Hrozek - 0.1.0-4Sumit Bose - 0.1.0-3Jakub Hrozek - 0.1.0-2Stephen Gallagher - 0.1.0-1- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user- Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)- Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true'- Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9- Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2101489 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed) - Resolves: rhbz#2143925 - kinit switches KCM away from the newly issued ticket - Resolves: rhbz#2151403 - AD user is not found on IPA client after upgrading to RHEL8.7 - Resolves: rhbz#2164805 - man page entry should make clear that a nested group needs a name - Resolves: rhbz#2170484 - Unable to lookup AD user from child domain (or "make filtering of the domains more configurable") - Resolves: rhbz#2180981 - sss allows extraneous @ characters prefixed to username #- Resolves: rhbz#2149091 - Update to sssd-2.7.3-4.el8_7.1.x86_64 resulted in "Request to sssd failed. Device or resource busy"- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2136701 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level. - Resolves: rhbz#2139760 - [sssd] RHEL 8.8 Tier 0 Localization - Resolves: rhbz#2139865 - Analyzer: Optimize and remove duplicate messages in verbose list - Resolves: rhbz#2142795 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged - Resolves: rhbz#2144491 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around - Resolves: rhbz#2150357 - Smart Card auth does not work with p11_uri (with-smartcard-required)- Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8 - Resolves: rhbz#2144581 - [RFE] provide dbus method to find users by attr - Resolves: rhbz#2144579 - sssd timezone issues sudonotafter - Resolves: rhbz#2144519 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file - Resolves: rhbz#2127822 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) - Resolves: rhbz#2111393 - authenticating against external IdP services okta (native app) with OAuth client secret failed- Related: rhbz#2132051 - Rebase Samba to the the latest 4.17.x release Rebuild against Samba rebase.- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8 - Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured - Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases - Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs - Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets - Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file - Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6 - Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf - Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP - Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect - Resolves: rhbz#2098617 - Harden kerberos ticket validation - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7 - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options) - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file. - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2 - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname() - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol - Resolves: rhbz#2087745 - 2FA prompting setting ineffective - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set. - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon). - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization- Rebuild due to rhbz#2013596 - Rebase Samba to the the latest 4.15.x release- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6 - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces) - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True' - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication. - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8] - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber` - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory. - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5 - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11 - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail. - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr() - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3) - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive- Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)- Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11- Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched - Resolves: rhbz#1915395 - Memory leak in the simple access provider - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)- Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches) - Resolves: rhbz#1893159 - Default debug level should report all errors / failures - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication- Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8] - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently- Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior- This is to bump version to allow rebuild against rebased libldb.- Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4 - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search() - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD. - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase) - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals" - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate- Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied- Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1- Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command. - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter- Resolves: rhbz#1820574 - [sssd] RHEL 8.3 Tier 0 Localization- Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache - Fixed "requires/provides" rpmdiff warning- Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active- Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for inotify events, and no updates are triggered - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card" on GDM login with smart-card - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network. - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma- Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.- Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3 - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate (additional patch)- Resolves: rhbz#1810634 - id command taking 1+ minute for returning user information- Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard certificate EKU and perform an action based on value when generating SSH key from a certificate- Resolves: rhbz#1718193 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly- Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is omitted and auth_provider is krb5- Resolves: rhbz#1754996 - [sssd] Tier 0 Localization- Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be specified up to the seconds- Resolves: rhbz#1713368 - Add sssd-dbus package as a dependency of sssd-tools* Resolves: rhbz#1794016 - sssd_be frequent crash* Resolves: rhbz#1762415 - Force LDAPS over 636 with AD Access Provider* Resolves: rhbz#1583592 - [RFE] Add configurable randomness to SSSD ldap connection timeout* Resolves: rhbz#1783190 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_autofs killed by 6* Resolves: rhbz#1785214 - server/be: SIGTERM handling is incorrect* Resolves: rhbz#1785193 - Watchdog implementation or usage is incorrect* Resolves: rhbz#1704199 - pcscd rejecting sssd ldap_child as unauthorized* Resolves: rhbz#1744500 - [Doc]Provide explanation on escape character for match rules sss-certmap* Resolves: rhbz#1781728 - sssctl config-check command does not give proper error messages with line numbers* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release Increasing version number to pick latest libldb* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release PART2: Fix gating issue.* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release* Resolves: rhbz#1753694 - Rebase sssd to the latest upstream release- Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm)- Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master- Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome keyring - Also apply a patch to fix gating tests issue- Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get the IP address of the machine updated in IPA upon sssd.service startup- Resolves: rhbz#1736265 - Smart Card auth of local user: endless loop if wrong PIN was provided- Resolves: rhbz#1736796 - sssd config option "default_domain_suffix" should not cause files domain entries to be qualified, this can break sudo access- Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8- Resolves: rhbz#1448094 - sssd-kcm cannot handle big tickets- Resolves: rhbz#1733372 - permission denied on logs when running sssd as non-root user- Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing the trailing colon- Resolves: rhbz#1382750 - Conflicting default timeout values- Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder repository - This just required a raise in release number and changelog for the record.- Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is not FIPS140 compliant- Resolves: rhbz#1726945 - negative cache does not use values from 'filter_users' config option for known domains- Resolves: rhbz#1729055 - sssd does not pass correct rules to sudo- Resolves: rhbz#1283798 - sssd failover does not work on connecting to non-responsive ldaps:// server- Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with no members- Resolves: rhbz#1673443 - sssd man pages: The default value of "ldap_user_home_directory" is not mentioned with AD server configuration- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Resolves: rhbz#1687281 Rebase sssd in RHEL-8.1 to the latest upstream release- Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is done here in order to unblock gating changes before rebase. - Related: rhbz#1682305- Resolves: rhbz#1672780 - gdm login not prompting for username when smart card maps to multiple users- Resolves: rhbz#1645291 - Perform some basic ccache initialization as part of gen_new to avoid a subsequent switch call failure-Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong subdomain service name being used-Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error. UnknownProperty: Unknown property- Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than 1.x, this can result in time outs- Resolves: rhbz#1578014 - sssd does not work under non-root user - Note: Actually the patches were in the 2.0.0-37, this one just adds this changelog because it was missing.- Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss suggests using * for backend sss- Resolves: rhbz#1466503 - Snippets are not used when sssd.conf does not exist- Resolves: rhbz#1622008 - Error message when IPA server uninstall calls kdestroy caused by KCM returning a wrong error code during the delete operation- Resolves: rhbz#1646113 - Missing concise documentation about valid options for sssd-files-provider- Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing- Resolves: 1658813 - PKINIT with KCM does not work- Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to retrieve AD users through IPA Trust- Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/proxy_child killed by 6- Resolves: rhbz#1652719 - [SECURITY] sssd returns '/' for emtpy home directories- Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work if ID provider is authenticated with GSSAPI- Resolves: rhbz#1657980 - sssd_nss memory leak- Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly for D-bus, resulting in a crash- Resolves: rhbz#1646168 - sssctl access-report always prints an error message - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the configuration without having to restart the whole sssd - Resolves: rhbz#1640576 - sssctl reports incorrect information about local user's cache entry expiration time - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys- Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui with smart card- Resolves: rhbz#1642372 - SSSD Python getgrouplist API was removed but required for IPA- Related: rhbz#1638150 - session not recording for local user when groups defined - Also add silence a Coverity warning, which is related to rhbz#1637131- Related: rhbz#1637513 - sssd crashes when refreshing expired sudo rules- Add OSCP checks for p11_child - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Related: rhbz#1638006 - Files: The files provider always enumerates which causes duplicate when running getent passwd- Related: rhbz#1637131 - pam_unix unable to match fully qualified username provided by sssd during smartcard auth using gdm- Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a PKCS#11 URI- Related: rhbz#1611011 - Support for "require smartcard for login option"- Related: rhbz#1635595 - Cant login with smartcard with multiple certs- Backport more sbus2 fixes - Related: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1636397 - SSSD not fetching all sudo rules from AD- Resolves: rhbz#1628122 - Printing incorrect information about domain with sssctl utility- Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not started due to a misconfiguration- Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated- Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_be killed by 11 crash func _dbus_list_unlink- Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it differs from the default- Resolves: rhbz#1625842 id_provider= local causes SSSD to abort startup- Resolves: rhbz#1615590 - Do not rely on "python" for el8- Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local users- Resolves: rhbz#1623878 - crash related to sbus_router_destructor()- Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication fails with the KCM ccache- Resolves: rhbz#1615460 - Rebase SSSD to the latest released version- Switch hardcoded python3 shebangs into the %{__python3} macro- Update to 1.16.2 release - Cleanup unused global definitions - Remove python2 references from the spec file - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x- Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change - Resolves: upstream#3558 - sudo: report error when two rules share cn - Tone down shutdown messages for socket activated responders - IPA: Qualify the externalUser sudo attribute - Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 - Resolves: upstream#3402 - Support alternative sources for the files provider - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option - Resolves: upstream#3679 - Make nss netgroup requests more robust - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured - Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing - Improve docs/debug message about GC detection - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. - Document which principal does the AD provider use - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal]- Resolves: upstream#3573 - sssd won't show netgroups with blank domain - Resolves: upstream#3660 - confdb_expand_app_domains() always fails - Resolves: upstream#3658 - Application domain is not interpreted correctly - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to json_loads() - Resolves: upstream#3386 - KCM: Payload buffer is too small - Resolves: upstream#3666 - Fix usage of str.decode() in our tests - A few KCM misc fixes- New upstream release 1.16.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html- Resolves: upstream#3621 - backport bug found by static analyzers- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set - Resolves: upstream#3621 - FleetCommander integration must not require capability DAC_OVERRIDE- Resolves: upstream#3618 - selinux_child segfaults in a docker container- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl- Fix systemd executions/requirements- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS- Fix building of sssd-nfs-idmap with libnfsidmap.so.1- Rebuilt for libnfsidmap.so.1- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps - Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD - Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system - Backport few upstream features from 1.16.1- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next- Backport extended NSS API from upstream master branch- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade- New upstream release 1.16.0 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied- Backport few upstream patches/fixes- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- New upstream release 1.15.3 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html- Rebuild with libldb-1.2.0- Fix build issues: Update expided certificate in unit tests- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4- Fix issue with IPA + SELinux in containers - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297- Backport upstream patches for 1.15.3 pre-release - required for building freeipa-4.5.x in rawhide- New upstream release 1.15.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html- New upstream release 1.15.1 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html- Cherry-pick patches from upstream that enable the files provider - Enable the files domain - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch which is superseded by the files domain autoconfiguration - Related: rhbz#1357418 - SSSD fast cache for local users- Add missing %license macro- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild- New upstream release 1.15.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0- Rebuild for Python 3.6- Resolves: rhbz#1369130 - nss_sss should not link against libpthread - Resolves: rhbz#1392916 - sssd failes to start after update - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd- New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2- libwbclient-sssd: update interface to version 0.13- Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned- Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1- Add workaround patch for RHBZ #1366403- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages- New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0- New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta- New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6- New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild- Additional upstream fixes- Resolves: rhbz#1256849 - SUDO: Support the IPA schema- New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3- New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2- Rebuilt for Python3.5 rebuild- Fix building pac responder with the krb5-1.14- python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed- Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step- New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1- Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately- Backport upstream patches required by FreeIPA 4.2.1- Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode- New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0- Unify return type of list_active_domains for python{2,3}- New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild- Fix libwbclient alternatives- Backport important patches from upstream 1.13 prerelease- New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5- Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures- Backport patches from upstream 1.12.5 prerelease - contains many fixes- Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one- Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u- Also relax libldb Requires - Remove --enable-ldb-version-check- Relax libldb BuildRequires to be greater-or-equal- Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3- New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4- Backport patches with Python3 support from upstream- Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT- Rebuild for new libldb- Decrease priority of sssd-libwbclient 20 -> 5 - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18- Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus - Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile- New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)- Rebuild for libldb 1.1.19- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package- Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445- Rebuild for libldb 1.1.18- Fix typo in libwbclient-devel %preun- Use alternatives for libwbclient- Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers- New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server- New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1- Do not crash on resolving a group SID in IPA server mode- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Fix release version for upgrades- New upstream release 1.12.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- New upstream release 1.12 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2- Fix tests on big-endian - Fix previous changelog entry- New upstream release 1.12 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1- Rebuild against new ding-libs- Make LDB dependency a strict equivalency- Rebuild against new libldb- New upstream release 1.11.5.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1- Fix bug in generation of systemd unit file- New upstream release 1.11.5 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5- Handle new error code for IPA password migration- Include couple of patches from upstream 1.11 branch- New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4- Handle OTP response from FreeIPA server gracefully- New upstream release 1.11.3 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3- New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2- Fix potential crash with external groups in trusted IPA-AD setup- Add plugin for cifs-utils - Resolves: rhbz#998544- Fix failover from Global Catalog to LDAP in case GC is not available- Remove the ability to create public ccachedir (#1015089)- New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1- Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info- Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login- New upstream release 1.11.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid: Process /usr/libexec/sssd/sssd_nss was killed by signal 11 (SIGSEGV) - Resolves: #996214 - sssd proxy_child segfault- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild- Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries- New upstream release 1.11 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2- New upstream release 1.10.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1- sssd-tools should require sssd-common, not sssd- Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year- Move sssd_pac to the sssd-krb5 subpackage- Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV- New upstream release 1.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0- the cmocka toolkit exists only on selected arches- Apply a number of patches from upstream to fix issues found post-beta, in particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)- Only BuildRequire libcmocka on Fedora- Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current- Enable hardened build for RHEL7- New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version- Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in- BuildRequire recent libini_config to ensure consistent behaviour- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name- New upstream release 1.10 beta1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1- Add a patch to fix krb5 ccache creation issue with krb5 1.11- New upstream release 1.10 alpha1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1- Add a patch to fix krb5 unit tests- Split internal helper libraries into a shared object - Significantly reduce disk-space usage- Fix the Kerberos password expiration warning (#912223)- Do not write out dots in the domain-realm mapping file (#905650)- Include upstream patch to build with krb5-1.11- Rebuild against new libldb- Fix build with new automake versions- Recreate Kerberos ccache directory if it's missing - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist- Fix changelog dates to make F19 rpmbuild happy- New upstream release 1.9.4- New upstream release 1.9.3- Resolve groups from AD correctly- Check the validity of naming context- Move the sss_cache tool to the main package- Include the 1.9.2 tarball- New upstream release 1.9.2- New upstream release 1.9.1- require the latest libldb- Use mcpath insted of mcachepath macro to be consistent with upsteam spec file- New upstream release 1.9.0- New upstream release 1.9.0 rc1- New upstream release 1.9.0 beta7 - obsoletes patches #1-#3- Rebuild against libldb 1.12- Rebuild against libldb 1.11- Change the default ccache location to DIR:/run/user/${UID}/krb5cc and patch man page accordingly - Resolves: rhbz#851304- Rebuild against libldb 1.10- Only create the SELinux login file if there are SELinux mappings on the IPA server- Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)- New upstream release 1.9.0 beta 6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6 - A new option, override_shell was added. If this option is set, all users managed by SSSD will have their shell set to its value. - Fixes for the support for setting default SELinux user context from FreeIPA. - Fixed a regression introduced in beta 5 that broke LDAP SASL binds - The SSSD supports the concept of a Primary Server and a Back Up Server in failover - A new command-line tool sss_seed is available to help prime the cache with a user record when deploying a new machine - SSSD is now able to discover and save the domain-realm mappings between an IPA server and a trusted Active Directory server. - Packaging changes to fix ldconfig usage in subpackages (#843995) - Rebuild against libldb 1.1.9- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- New upstream release 1.9.0 beta 5 - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5 - Many fixes for the support for setting default SELinux user context from FreeIPA, most notably fixed the specificity evaluation - Fixed an incorrect default in the krb5_canonicalize option of the AD provider which was preventing password change operation - The shadowLastChange attribute value is now correctly updated with the number of days since the Epoch, not seconds- Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options- Own several directories create during make install (#839782)- New upstream release 1.9.0 beta 4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4 - Add a new AD provider to improve integration with Active Directory 2008 R2 or later servers - SUDO integration was completely rewritten. The new implementation works with multiple domains and uses an improved refresh mechanism to download only the necessary rules - The IPA authentication provider now supports subdomains - Fixed regression for setups that were setting default_tkt_enctypes manually by reverting a previous workaround.- New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders- Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture- Fix accidental disabling of the DIR cache support- New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging- Fix regression in endianness patch- Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol- Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6- New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests- New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information- New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools- Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing- Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup- New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work- New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc- Change default kerberos credential cache location to /run/user/- New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider- Rebuild against PCRE 8.30- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider- New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well- Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- New upstream release 1.7.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 - Support for case-insensitive domains - Support for multiple search bases in the LDAP provider - Support for the native FreeIPA netgroup implementation - Reliability improvements to the process monitor - New DEBUG facility with more consistent log levels - New tool to change debug log levels without restarting SSSD - SSSD will now disconnect from LDAP server when idle - FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains - Assorted performance improvements in the LDAP provider- New upstream release 1.6.4 - Rolls up previous patches applied to the 1.6.3 tarball - Fixes a rare issue causing crashes in the failover logic - Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.- Rebuild against libldb 1.1.4- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() - Resolves: rhbz#758425 - LDAP failover not working if server refuses connections- Rebuild for libldb 1.1.3- Resolves: rhbz#752495 - Crash when apply settings- New upstream release 1.6.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 - Fixes a major cache performance issue introduced in 1.6.2 - Fixes a potential infinite-loop with certain LDAP layouts- Rebuilt for glibc bug#747377- Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.- Add explicit requirement on selinux-policy version to address new SBUS symlinks.- Remove %files reference to sss_debuglevel copied from wrong upstreeam spec file.- Improved handling of users and groups with multi-valued name attributes (aliases) - Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing - Improved process-hang detection and restarting - Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) - Cleaned up the example configuration - New tool to change debug level on the fly- New upstream release 1.6.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 - Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) - SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined - The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. - Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) - Three HBAC regressions have been fixed. - Fix for an infinite loop in the deref code- Build with _hardened_build macro- New upstream release 1.6.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 - Add host access control support for LDAP (similar to pam_host_attr) - Finer-grained control on principals used with Kerberos (such as for FAST or - validation) - Added a new tool sss_cache to allow selective expiring of cached entries - Added support for LDAP DEREF and ASQ controls - Added access control features for Novell Directory Server - FreeIPA dynamic DNS update now checks first to see if an update is needed - Complete rewrite of the HBAC library - New libraries: libipa_hbac and libipa_hbac-python- New upstream release 1.5.11 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 - Fix a serious regression that prevented SSSD from working with ldaps:// URIs - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 - address being saved to the AAAA record- New upstream release 1.5.10 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 - Fixed a regression introduced in 1.5.9 that could result in blocking calls - to LDAP- New upstream release 1.5.9 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 - Support for overriding home directory, shell and primary GID locally - Properly honor TTL values from SRV record lookups - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP - servers) - Properly escape IPv6 addresses in the failover code - Do not crash if inotify fails (e.g. resource exhaustion) - Don't add multiple TGT renewal callbacks (too many log messages)- New upstream release 1.5.8 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 - Support for the LDAP paging control - Support for multiple DNS servers for name resolution - Fixes for several group membership bugs - Fixes for rare crash bugs- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d - Make sure to properly convert to systemd if upgrading from newer - updates for Fedora 14- Fix segfault in TGT renewal- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites - cached password with predicatable filename- Re-add manpage translations- New upstream release 1.5.6 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 - Fixed a serious memory leak in the memberOf plugin - Fixed a regression with the negative cache that caused it to be essentially - nonfunctional - Fixed an issue where the user's full name would sometimes be removed from - the cache - Fixed an issue with password changes in the kerberos provider not working - with kpasswd- Resolves: rhbz#697057 - kpasswd fails when using sssd and - kadmin server != kdc server - Upgrades from SysV should now maintain enabled/disabled status- Fix %postun- Fix systemd conversion. Upgrades from SysV to systemd weren't properly - enabling the systemd service. - Fix a serious memory leak in the memberOf plugin - Fix an issue where the user's full name would sometimes be removed - from the cache- Install systemd unit file instead of sysv init script- New upstream release 1.5.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 - Fixes for several crash bugs - LDAP group lookups will no longer abort if there is a zero-length member - attribute - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- New upstream release 1.5.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 - Fixes for Active Directory when not all users and groups have POSIX attributes - Fixes for handling users and groups that have name aliases (aliases are ignored) - Fix group memberships after initgroups in the IPA provider- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication- New upstream release 1.5.3 - Support for libldb >= 1.0.0- New upstream release 1.5.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 - Fixes for support of FreeIPA v2 - Fixes for failover if DNS entries change - Improved sss_obfuscate tool with better interactive mode - Fix several crash bugs - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this - Delete users from the local cache if initgroups calls return 'no such user' - (previously only worked for getpwnam/getpwuid) - Use new Transifex.net translations - Better support for automatic TGT renewal (now survives restart) - Netgroup fixes- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf- Fix memberOf install path- Add support for libldb 1.0.0- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base- Fix incorrect tarball URL- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated- Fix pre and post script requirements- Resolves: rhbz#606887 - sssd stops on upgrade- Resolves: rhbz#626205 - Unable to unlock screen- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but - doesn't require it- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate - against LDAP- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover- Bump up release number to avoid library sub-packages version issues with previous releases.- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline- Rebuild against new libtevent- Fix licenses in sources and on RPMs- Fix regression on 64-bit platforms- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes- Fix CVE-2010-0014- Patch SSSDConfig API to address - https://bugzilla.redhat.com/show_bug.cgi?id=549482- New upstream stable release 1.0.0- New upstream bugfix release 0.99.1- New upstream release 0.99.0- Fix segfault in sssd_pam when cache_credentials was enabled - Update the sample configuration - Fix upgrade issues caused by data provider service removal- Fix upgrade issues from old (pre-0.5.0) releases of SSSD- New upstream release 0.7.0- Fix missing file permissions for sssd-clients- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust- Ensure that the configuration upgrade script always writes the config file with 0600 permissions - Eliminate an infinite loop in group enumerations- New upstream release 0.6.0- New upstream release 0.5.0- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild- Fix a couple of segfaults that may happen on reload- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option- latest upstream release. - also add a patch that fixes debugging output (potential segfault)- release out of the official 0.3.2 tarball- bugfix release 0.3.2 - includes previous release patches - change permissions of the /etc/sssd/sssd.conf to 0600- Add last minute bug fixes, found in testing the package- Version 0.3.1 - includes previous release patches- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream- Version 0.3.0 - Provides file based configuration and lots of improvements- Version 0.2.1- Version 0.2.0- package git snapshot- fixed items found during review - added initscript- added sss_client- Small cleanup and fixes in the spec file- Initial release (based on version 0.1.0 upstream code)/bin/sh esrusvuk2.9.3-2.el82.9.3-2.el8 .build-idca1f430bb1a47dd305673d93004ae807a15f6ca2e80b0e0f39685a0e9ecd7b7da34771dab0523824libsss_ipa.soselinux_childsssd-ipaCOPYINGsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzsssd-ipa.5.gzkeytabs/usr/lib//usr/lib/.build-id//usr/lib/.build-id/ca//usr/lib/.build-id/e8//usr/lib64/sssd//usr/libexec/sssd//usr/share/licenses//usr/share/licenses/sssd-ipa//usr/share/man/es/man5//usr/share/man/man5//usr/share/man/ru/man5//usr/share/man/sv/man5//usr/share/man/uk/man5//var/lib/sss/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protectioncpioxz2aarch64-redhat-linux-gnudirectoryELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ca1f430bb1a47dd305673d93004ae807a15f6ca2, strippedsetuid ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 3.7.0, BuildID[sha1]=e80b0e0f39685a0e9ecd7b7da34771dab0523824, strippedASCII texttroff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)88PRRRRRRRR;RR R8R1RRRRR%R3RRR+R2RRRRR5R$R!RR R&R9R R RR#RR)R-R R,R:R RRg%"YG fBxMWCOKj=~(t%@$}hv`;-9{!BY[<(B?:uDNh"ؔ"dY¹2^\LRpA@{00kl60$Œb#zUJy A? _a5D#SA<IŜ_Og0#Yt?D׮(ߟeDۄyWRLȢ{"`g!2AZل`KY֍a[&eHY @TrTW;LCe"jӑ,aŔvN9!* pc) QkρBE.ʹ L^Z@U֏^CJ6XU58#7p1kso?gXJ6ls77mGx5_Q&Ukxhe{H2rnr￢\H'UUn+jLMe'$zoIUTS> s1sMeMFﬗIc(E\Wmc 1p^@Y4rUbHf;MRN=nHIp.lLa \t,;+v?eEAܻjiqGPppc!+ Rm FB1wXJ-0Wi_H!={ƓnLakF|Ѿ}+l|jkزQCU$bԝm4lE8яš 6p!؂_JHK*kY }E=I + {l޻7p!E] Ǥ| wyZ^HG)^44<͠!ikSEңPQbbHQȜ #8|ABy// FyBBUZJj[H8X+$1^h8ceeMJ߰+ r X.JkQMg].sڑI>8r?}?%$c=j$5 q x$-/C" a{'1]`Ћ 1= QgڑnK}?D.L = \ h饓eU>z\]_;:+h9ZG2&h6-4?4ޠr oZ1َ0@U[4f *a u0SZ#1Je}9-A71s˜ɚ8)K;}wS+'9/Rȯl 2y8i"I™݁| ÒvXn:X.20b;7*"o.S-dBZTk%g7ĒHR~rT~0 X-Tj<!MJbn3nk~ Jw꧆{<&Aĵ )@@n3k0O;'ٮ K53IFwmv-'BvP]N;a܅SdUs3xVNBGhȹgJ9܌Nn>xx53eSKVU D=X7\Tͦp)p%nR I#aF8%I>+@e%<+(G@/SyFgn^[CN%)BHT!p mHSPbju> >#Hb?_J#V"+ws kN@Y`ƃow"K՝(=Ƣv@;@|&Rgr&ąu{D׈`oE`Z[@ć2!KVjJ(".B>Hi .ſ%>͘4"aցgȃ"ԗAU~ˏ9p5Ae _t"=.޸ Gv7c(;ERy zj37@BVAcFaޤDSDK7y`UAY2MZtI:d1 + R BU^EI`dY$'>P?qH&hC`@{->eRoDL#%mQZrG% ,kM߁{ W,`#VN/P_6,ZrI}_$]cw\zBEt1P-_j>BKb?LnsXh(w+LUF6ZzU:*^.taEe1͖d׆Q^9d ' dY,c %mgF7?֏ j^6V sPC"Fn#_H;W5f!Qy3w[fp- ])Xb} / 1UJ džȽp8bD5{p4K," AT BLfӗj ?y.G>7CbwI& 7=+C~8jKug,hdX!Lu`1Zy<)yqGi}Lk Y9dq< hzN  ,<}Ba4 ŕ#-By[8Z0Ը] aƅV* @j8̪!ER{V} gtVE̓ |fC(mǬ}QZ$a֊h)OC `+o}qx3y Wz$p>?$0or$6w 1a.f(95x-}c8gN[|s[M.W @M)>f'qde/J.A:R^Y[72ǣaJm";f ,RoW$oG>:|A4?Y-ZBu]`Bf[dТ)+5VF̛ĜOUL`}rqHLl[[l'mW2AX݆b%kB$$Z\bۧ[7a"hܽ)8D8>.'SUjJ#Nd"G/U.DL'[(j]bBR~\c$JJEjR/5gyi`"P#K&9%L((X}B2+޵\4X,!":MY9ihr3D*J3 ܲ2j~ d4=7ץ0S`/ZA{rC?H>+稧0"WnnE~r7$#)hwRҬGcشܢ/Bx fx*d &4 u5[}GƦn|n]M//TW24KzW.T7rv/x,#93(tb_wc&/3iSwˢR-#zUcQ(WGeza]7^fLJao:0byM*i; o1xPp~O&&>pODNgV!R܄g쪿HE`lkrg$HׅsmJKhcUm 靡יlN.PhEsyo!ç| n AGxRqJI]$"R/>8 :=Kfd˓hUlPfEbb&u|Ͷ/ 6WyS\N;H 6R]:6za}̟)yiU,C$[X!oZ:elwz4vT"n"t:ͤ|"7>Q³ZOh(Q]ˢZ>(QI{̘Öbc| ;fU, _ިļ=z5rWFn|d ݊gܧuVǜr kZR~ $c10zP澲Ώ7}^cb'&@ 7w/:pUM9JŜT ?Q X *P󓾔`RL?Y 6X.[Z<ˑ<DX5o&ˌ˼sVLF\Tag/iYYTx3<"G~MR W?:gZI2b/L0LǙ &U 69cv36ysL)ԍ]bl& Ϛ @]=)-i@*V6Oc."2d#yz'HB#i%kځ+E~58 1Cd oVT#}?!^lERjcFrXVR͏,5;kNvD-[K4]3 QŵƍN݀5]pSO6Pdژ٢cAf3^Փx6zaK2^jvDXo]p&z\BSc4\9gH972#ya}` P9Y 2 מ`ɻ/"U}qpP?O< ?[E>!\y*&9I\+TJ@aA:5_약jHs)rlhټ2% m>d6pJgteĭgz5!u/jqj'{PrL ]^DYU#Ԗ6璱BжuHdY%~FmtxUTӱx5^.1;_ހSb`Eilk/c^<ũ@ٻamrϬ @482 %Z )EV%oI6Gуr;; L5k֮ॿ:s|iR^8 FVC +v=Kj" ;b<ZgN+&䋄qa}\ Xz%t, \4xܡN>1x6d* /0݂Ir,fK$2.R^8];C.@\"ĝوuԛຽD  ۟mQ㱸hCs':Fڦm‡_K!=˳Ԭ[~hb/kX-%oU>-D>QOZ)"Z9nf .^P|a2.EU>{wѲPjZ JLG:씜MKCl4wMp3Iܲ]wY7!T^J,}$S\k& Lo+TM wo"ﾝc<.ktb=6vGduԄw9Z6J^KxTkQ) 9pGȨbB<=3w*Qeya7Cut,{TZ1 ^@:iFzG$2j`~AiMnfYy6{,[K2ͭ&:딛h)f({0TbCN(IQn Xĩ`hcPAxWKHKY.,.Mx% MbTD*e#K( A4+NydJAxC5 <)[+P[Ȗbi+TTޖW-'7n 0⭦Օ*zF6zY#x1Z#:(&C ifHNasx}LŽ36Lq8NUhD795 5*)n^u:z *,l^/W2Lū;eґxU_:œiN{3[oxoNZ&JRe%,|Ráes9ORweIv(jP1 !Br\!}Y:C@L;Kȗe0ړ*9z2A'5a;٢"H);HV~s)ThJoG@2E #NQR{5^><ʦ%?m_َn.a<pjMN},M_Z{ni;Uu&e&;gX,IBV=䪡)LWB7Vm#'&ɍ:Ǥ-7L=3[DCph68?)iwc.=1D-Ϋ-^?},%1t? ]|8/j8>mNyeud#mKf=/8?4cZ3&Az#==N/v)8ɧ|oJcJl+\6PDz[6TLX n {8`~.o'YEC!=%ѩpJ 8{K+ Ѷ}h~! qQ2vgN1aZ ;*x-ϙ PfUGsVKim <Χc#߃e-2a1dk$žt:7%=FyqԁL2\V(V`[ZW$.,w/OnC&:h TSE1"?|[@<4qiF[G:1W5)B#tX!J:A,ʋn7i 3y6`3p)N)t$_AO9y]0ZZ%Qb]^3vq NoCs;l!h*] y ciD)lTP~ U}(bk1P0C=j2ơzq׋KSձ%LW>}Cfj~"@N?dM VGk:@s02 hW]қqrvzgHY6G7]Nr'*lXYD,{}jU][mS<0FuY`m.PK1n*pUJ$74 [!l_Я ۿ`~س,]1@nNtSqʫK(&0d6uA Kngs%?F~lH6ŊKELS4حN(32y>#m?bEA f֛Q%>;;u4fAԲ-6jTc?L?m@E|*;'ƒ.@t*BcHh?>oHP%٤)K}!SљdpY4Zzl5f(,ۦ1G}XM[QnqQ^ͼ,2/W>eo!t0Чh>FsU`~$Ć, PhX1eq+T&]$aQ{ɓK04lEFTمaWg h)wQߡ$NY _JP-/+m$3z}21K菣4%Cl_Ƨꐽ4h3[c0fPm-kXOPw ]ӊ"g~4 @ؘm EnC5˗H֬h6h *Q1׺!ηqw삞)Uu|uOl%>VO1x?̺rK=9Yis%w\h"^hrUc@oyִeWܜ  ޹MnUp!A޻by6=0g J17Ӏebj<1Xl_.?wq\71F wrI? nMWSsn6W!pg$7y}SRsqLl?;6[/aucv)\@Eϊ iO.i7ì2Jg% dfJcܩlie!#&CcD`Ntj?P}Xl^TK(rc =,+_I6VmadڊPDzֲWFa&Iqh+{Sc,%-?v/X or]sD.kf3tʃGA/)?L'mho״(fda6)0ݐfMn;n gFOJv 覛]jɼa9 CmFpȦŢpdwCL O9[$TRG$ŢTԘe(CmU"Q8Du^kD2 Zvpҋ7ѥR0(bZ6Yqq[|B D! r1eì M xe$ ba,TxQ)]'f2)rt?yEbB #Ò"qp' _3+]> A.Hz?|\קqgw<_upt!~͈ X ̹̾_Ti j{7Q,o-|4D[l~\!nVژwK`u%ZfnEB=3Bpl֑m^qU&s`{ Xџ.e~qJ I"eTϏ̛U~K(P 7,oeeGdwWut<ύiUDop*Ngswz7?2\_M#6OFMQ{$ t(6M 58א[vq 򨛍T,lljFUn]?R^h%j*6"o'RUPTM| Xd9t;/ʫ_(<8XU F.9+D|PLɟfF }I2?hv79C=GP0DO5LruCDdo9-PY> !p~yߢibf2rL7FxFȆŒߧ5G6\Q5n|v/J@(Zdʡ$k0BgX @CP<toE|1Tj=¾t@T.[^;^fH`ڲ"0OuVfyZڶcɸ​R~Nl0oՌRs r_`jCmf`3WA3InY;[1 L [ u.7+`4x|YeHPZթB.;% hCh+#K84O7 b[${C II: .hBHN ˇBuń}ʷž ot6n%+:@JG*F:<=WTPgoTd;2To,~:0YiS{p;~!+=(ܫQiNv9vJJѤXry2}*:p℅ XiK'EԲ~P8]؊*K(ݔaCDRb\Ʋ {zBӻC>q] ڵ5&VgBK ZS'}5bh.z_rUZ͖nyaV J^[x Hؑi8$Ɔ%ůވd{άh4?[+7u[g{д\0B02C&G~?=Rt[sLR˛gZ-7u(ŇCP(]Tqw^\1#[i$Vc K=$S'vz{vv~"dKS spp Y:y.dϮDtmǏn ŭԇ?ձ!GTډg<0PBK@DG'͵>I/aYIFaj[գ$vR܎PiZ?^NbE<>q~ GT{8;As(ffy9Td5ڗwK)04i"_VP+ N(~ fr$eOu5Qb nZTzq}ۍ')+yϯIP!Pa9 wtO~g036/o1Kq{Rc*BO\~~5k,aHk]YKQ^ _vuv{[Cy{eV%k8jT'Ѣ|[zS9瞽M<cׇeH-tͅW4a2Ol7=a:)!T*hwbb8wei5V 1-Fe;CJp Ÿ3~J'7FiH"ٯM.Z+ɵF LjÞoHJ{3-sڕgfdke+XS]oRsV=D0CY#])zh!ƿInlg%vٯ(0Qf?D mkA;LJ&Dbw"GD W|R`߲w2Kҁ?le20q^v"A,*ed4/h2JJNS̛({ǥˋT7[awPN;Y*Ǚ&(wHکJ.4:̰n 2e"OkL J̹k"MKHkD~hT#l[IE+ T=Ԃ`Zj,)Cmt&6 [vo_:cMǖ]h,Gޖ qҚD6K͵.ƼNceѴMߣ}⻘ 7)[}ux#56cKt!ׁ)XY+injǁ!-j.?gٯmJ5?R0 taPn(-EXEϾXߦ{~`Ksy"G愅AH 홵3DK9YJgb&bOX&E 3g0HBM#S4eUc7=9+8$b51]|H6ݏĂ.b*.T Y<:h[;SW06T/%'7뤓Ke-iRa!Fhf->Op$WtE!`[,Tg8Pk{ +&:}S<'T1 <WeMy!HgڜM.8VįO,L$}>Fj@ѤS-_)7\UlU9?ƽsTo'g/ajpv4m溿la X (-/ax#F2x_CyHd&{iCvP_0B>Vݿ}:F19;SaeǠ(+XP730) GbXơ)=Rއ UZ,ic]A~^ChgQ/`&ԝY&)x %+ ~ a_֔ Ӈ(]o5 s%jeaTע4J;9Έt=Zܗ)7ϕŸΩ9TEJ^@mxb6c &wڊq?G(wڍ.˧fl"gp)V7SjO;nW|"d 2AO¾;$w > Gf kNe ̈A RQ0`^!jTHC~}Тt{.< vYW Ţ4DVߕ!nf^Iwɱb?|*gUpyyƥTkzvwgʺ"#vU#57ݯ z~z<:]tw&/D6'J#t(ȴd*6y40D1PLsL5kXnGӘfbE`iHJe1dQO'ݣRM\]|HlCC2{{ն^S_$SahNgg#8 R[Byt7=,܁lt>fn Dt_zl8KWZ&Q, c] wx_ KE2%,Q'g%2']S32.Vi'pQ>ņu"O!_D} PpO8=$?,6$q$@GvHNciBŔC<*a|4o0Zt_}P Y5O*:kec 'Dʾt7OmL f.Dnw)w_WI favin'kR-^*qPW+XٕMO]=˯ǖ\Y|\h mW``1hBįKO> ˬp?75flOrO8JWl $umvu#N)@>$9t"?) S`3{˯coPF{)j_z:v9;$(-?јB0 pDWO5pe70M9;^[M뷌 _9I}ʺTp͐XT^k~g`ӖOuR:LgEYо*ɅC(N ^ &/ y>N\LlD>T.@o[FsH`]j+K<*AߵTa#>VW_5$%J|u{RAK/RQM{ n5Diaڰ{ïI1t++d\\wPj֧D1۟5WaDieQ Hol_.W5SMz5f|20dQq'ٓb0,T"L ̸tJdςBCD 1+=|#fV! %yHs뀾P+lǎyy,UR]NcܮYM)h2.$e+oк.jb# L$S_v\UG 2mΧ eLl^ iHRϮ=/vBU4,XXpq ֫]嘕+LBg2K~RFj诋rf,hsFnYa %|dN#&V}O>YX2˶K|A&Q+ m:E[<7L23*4I=@i,ߧӨD6$\KhV \SȈϴ:, _x댖rTa͘y+ ~ s[8'~rg'>rN 63atP|c0$s#Yj2ˏ,BP/-[t T 3!pE.4i{r}y^ k!D5wlz;@ k g8%y8^2=@"&bH5/XV{0`ibfX]x'}3T:$%ɊX12]78My8^ 鯦:$2dwML ޛzEM62g[1d6 ٛeߦA*4˿GQZj|b̃8#yA08K[jR(eҒ} pxSh& PAiA=`B/?[4ĜsK']d b`5Y"G5p, ]MI1CDLTz,ZK8CJ=$KpMCCSb[o!̓1ľ \Jx[<#+phtcE$ۅBX~}>L$"J7t__pC/1v,}2Qĥ]3/ Ơۖ3\ڃkSC)p?y#W>5YJoY#&:/E(#jeoLI;ǓWY$oe+b;PTl+51Tʛ(D j8w 1=XdҶȎB,`xŽz4yQ܏GvꀏG<}{Q9,+< \m/0V#M9VL<V#Hn(<8/FLFҖqOK7#ǖm y%qFqD;8vUVr-9JS-Ybgk\rYu.C'8Աq):Mmvy9Ri-HrxðYsU­EH]FS~[A*W,u%k6^֞R:lZW :N'08 NYHqS!F*ZAg|FYa:=^ 'SX$o'#qNнQ\TIFrYՍ_yJa0*tN`"S.hFeE^!D?.]9(o @qoaѝpodka]>dhA'F1'Y$Az mT*ތ_p=Z?<{v9`ySF uv3aoh5AiwᖉdLtyƉm~+[bڝ4AUΤU6!X;PStm,-@o8Iu36YWs9@i"S\`8g,)03W}ۣA@uN [P8ZR1+q%[d<"`3 H{}ƥj #LqH LeU3R(FiLn5FN?tuun.0=hYl%|i2G~H|s^C M_,}{*I\8IZJU}d|1(_pp4Y7U2*㜿J^ۢ#Y%hSZ`alD2Y07Oq /<)1Ay)xDoa6Mڷw!& E0hVO0] bĹfH۩OY+?g?ݒubf֭ RGi#'K)+v^w=5x־dYO:?yIːç<,rOgHjԓj-_n&+:/t Ƣ53`Xm6RT!>VeI{៛aj6K@AA>آ˷Vo/tOт-9d9ivBF7jYE"0)9d$fM 歿ՖXyo6TM#5 ݩl}&ӚVッP!HɟtEFbxz^ N<.ILL3\KD3@DzOocB1)(Sj3Y䟢ۜWePhXѧlH Mv|nPf՚ -S'GvH`.i,6{ad9Kd>ٕ^rREdԠ/{ZL5?߼ب)ⅹ{і%BUCS}ܖ 'dӟhtKE+)V_ Wc1\ڬkE:V:/ }*Y߭LJhaDNL7O'eˑY$Q3*}8@+fxjס*b'A;3,ht4'Rl5ɲ`Ңh.GDQeUTFaJmx-`c]C$0jA'XLW1EHF"{WsTPp}鷃LD{-^luǛJ \aQM-Xg]z[_ {+RL.|1B,fp bC%5ƇX$8 / tL8"6S bB9}:0&谱eO}{ows2){5K߂i!IB‡^BbSUKu`oI΄6hţ rNÈYձ rde5{1 D7ka*ah".Ύ }j!Dƺ}Gg9>ﬗED KevK7ZGqڭ癓w~86sˊ[D<9 (6MF|9X{i%x.nbi5IP'& ʴypG~ 6zTcsktS$a. ,欚*wG8HH{M?^Ēq!ظ|OjGUe@1 DwÊܝ'4d}@S)VM֢Y|Rq Ux[>wnvM \tͲyKj]"W}4CHq|nAݠ uD#6+Y”uYWhX춷 FV~Nc#yj {E0҈ΣL kٙ[ok`-@@ ݧV6 [<%Љ@Tՙ]@lܗZ4(?dj;T$ߜ3Iu'Lw[ONhp7`lGKu?T6Si-vʃ3[]&J(kJTۺ .j ʏ*4^WY  pM[) 922ub^Gֵc}t׿i_z@ CN9|sA^8?xeiN 1V9.eXC{Eh+GJ8qq~ F1 O? iss<}<@"sY* 4]y717 *sK Emi Ru^ڬg;ju5u__T=oBGNg<ߑZZ+A@;1qvF e/uȧ^>\_ 4oHzD?i?K2}*+=қ=zF>00ᩪc@ϱndpE[hBuF۾_(8CY5*nɟGUvWKS'Τ<)F޹boyܾk*0v?Ƭnige6,t^OfJq7/g$jLnSPtMlAv`!A]-Iާ/m!5D*[|kgAs2X*Rf:dT1GwF<)H.2y,3/~|QHܹ<6C˯pMz("XYw`]WOg π0)q.<}&2Cm# zHoc6ge„%< |d$Wy_d_N<7Mo{y) cJN-zexzMS?Ӻ6ia!WZXFv+⋊M:[Lq UVsO߃뾅GOTHR9i(m-òL&$&X1/^K]<מ3$O=sB䇍/B.I.,%T)JVU^ZsЅ^{8.ޑsWϪsA@'|מ.R..$sQĄX62Gi.iLDe-]1JOt6猻'W˴:a STω ?)'^9/A^/k0e|Ç*o3&=6`l\k,]9|_-iC؃f=C^}|D;B/cIOɴ4C,>k ?#@niw@u- vJSA[kn/ j[z(%vr 7zD>h"1PiH_?ʼasD~׉`(T+!dMg5'n&D;nsv; `^Ƹ}V^tjLW6Tf;_!f!; VqZGFUnsgi%Z!cRUF6@Ln~:hG9$lStQT#ym{Ywh1DT}_BIR1's0s;^Y7)#=֕KVR(N5ɱYmA+SQFf v]\9phi˘9Im f4i;%@NJc%CA_nw upY7TE+tf޳! 7Oީ ph3+VMa~p,V \mf1Kfr@}o D^߾?jSy0I1co*RЖ&/t=3],ZI HO@$zE8ju"vc:蘩d2N/ړCӜ8wwAnE,S!hv|MK#eƺН>w\"2V[*v5B| X;ۅVV,P|OV1E_¬5KZ}#rmzL(zQUj-١tOfZbFVߞ & 1 ڷ{Ru6aPxA<tR l0qq3tC+fz_CG❉ c˭\0"4#؆k}_[lhPk_uJN)Pf{,Q,)XD]C!=|PQ"R!SNvtŒ;jyipXuĒv.=&Zq8K䱔c,qɭh gf9^qy.Ȑlo3Ro MN$%-У7lּ->"eΒyzIȈ:1YpmFFз1D`+Ri6FCxh {@"щo݀g [G#rУ}ǧS.gGԖCYC~4i-x3; h%}[}GԧR>Σ84\2] λ$8˾u==K J};2gB}K:'L'0!bVg1XNl+wèȼMbUbS-nj c*{/#n~tqԁ@Pdm,sl~5*K'X! h*G~$GN1HóާyOXeLVK eW :i\^y@V銠oLo/Q:܆师(1!Io Ђ& lROv98.>)M,n+b%(\)|ۢ`sC+>/T} y(זk{Ⱥۣ%wd3QgM>Gll&ZJ(jʚq4,! 84XֿU932w5c% at_w(&fDm'F:ZRJ%P>qBpo*\URSzjfvy/]]G@%#}&0e1 ./JN;&O;^0ktM[&&i. uߎاf 3a6F]14y^DkOu/9nbn\j.0KGѫzJܖ,#~xn-E&̻U߷Kn-";ugJN޳.%:K($A T}4XB饆RTfYXp,~ &{Y'Ɓ$`˾bDR#+PĦ0d@YK3W-M2vF+BUND3wu}7iRҼ+53?Mr&үEN-sB#6|\hAl~VD~^憊)!~3@d[4S`6su {Sp򔼢(Cӿb o4=46njo~{9E@8RC1K^@s~ϻxOZˍ Vx$A9?QT#;ӑx B$Ekbރ5h)snz Rs i[~Vj-Z ,>ƂzU n3}D5{Tꐈ?ɾ=&-$Vë/| #\~Sno$fH9hJ9bHjs4aw FNtȕ(~?AU ߂z0?dl#dGS=y`6-abO tb''8/6ѯ טsr‹? ۚ/M^:[A3D49"Xj1-}k7\,hVd2`B5{H}wЙh'w<eyף%4{$c'(CɵgZ֟"p!k)%19d\%i舁>y P05~/O#˶z #,QVeN;9꾼mA[`f#8h,&B twE_|GV߂X['&|~GN%z5o@DWsKluhe, QiZ Іq`<@{ڢTk-8FZ1x$w'L[ mj }MHYQ%ݬuF>EgwDH/sF Θ)ElRd!b_EnWBNu{tc0y,lGój2\O7Dp#RX )PwZ N~hcrVl2<_:O.VxX'Vх$͝ש$9! #h\:A \ŒyS}<4A$ɧk~y{/NW 0k7LJjR)6m?*wa܏Ƽk yUYqZKK!@Kj1"I{r,CUf 1DTYut3޴P4}"U\$oQ U\^Q}pN܅gP $hGȄZwQ.F2a1GZOO\꣕HFAjâ&fB4TZ'x0Ծjo ,;~vgD +DA⩾8D^c5@ 0$bU[Cc5\yӶ%lz%Gk̭}m86pW@̗p2c'`onFv!>麪6ao6$A6iq;VlV8:KnV7'֫#{I sHc5wc|EL]<:!4CTR8vK@iAM7 F< ;mݶ` xC0q_VV#E 1rtyU9=Bs6jr 0/%k5RG"*AQͨҖ׶|aO}6šNbvz`{c^E1˾ /WD,b+d($q67$"ckfɏyuyWL&1&ĝ|Ӣh3/*b+I&f8^!V`O~s,cHі"0D; .i ˆ2;×0i/E[psHu?*VSǙp5N!fs`Ev*I]vk%f3tqIV#IT! .3PW D|#WaŧS(g4.̍Y*WX'7YKt6/K }vN<q󴰥pxwO3[ # !†ۜc)8$WQj&J ʮq\}= {@#~0azJ8)Rbt<C*˺ϳ;γJQuIמP-+T (-Љ\N| Yv]=#mD n> } t-nv"PtgM@痿y~RP*H?>YivBc jWY2iJf>35ݶ+vk/[hRJB 40/⥌_n?ƺl]?fiQ*`OBv u]PB/Ixœ93%q\'fWUePU`~exS}~)a~_[[GS9 u }J0P. vʉD銽ܮ 7 )Ɗbn>IsB?Ɯ?uU XO 0[_msdL@ި _ϋA_ GX ֣?(V4Iua=Β_C2~J^G'|-[Qe=rʚ<8{`9R_f”EuMӛ4wr:{s"0C- c#͋u\`JL gzpP7aI54a+`x! 5I*O赧~e pKU7 Ɉ>5DįĢ ^Y@lLH{su9RVQ LOf~ |)GƟK^G ٹzg)R:cmj=jW~DQOcN}s um`4}Ig`ƍ2F$ᢵ,S!lGոސ^9;2ɴX0'VvOW` {_Ql'wYG6^_a 1<NPLHs[Ք>h-Gp7w4Jd|9׈=prsa.J9hۡma?|]E^S ޫ3} &ApnH%C}X-Ϝɚω-[m%fNh7ow AE27uF{͢Ze'D{wzb{XyIfb-ġ1Z(Caf‚Cس5GOx\ &x~j IüS]@&}0 K o< #vOGDCc/4-UxC.JR\LZ r{}%r<ԣ_OS "4&J32D@,$>V>y׍yݾ_Ev-MKFcu[" hsSؚ?tOˆLB(jþ7.HIEI<|{j7YQO˺C 0WxUב`}I=Hda*@8*xFmrI7 zZN l D"J}۲= 0?0tωGOYXN:#ޏa7>7A9e}U%@50MG%!(d#&CH\ٙZ!jZOźDb W캜J6{Q^qaN)͜- T8%siڠT?vVSTtv 矝NV<6^ehSSN@I@>]1wY>b^;:=m6RI#_gvu "#d!1N'I^P{}@+@n* E¥nDdD%ŠK('m] 6`#c?P9_W7{ܡmP;!0Ag3 D(RȶׅFyd㈍m Jh*[o%ܐ.w8V Lĝ/({]#vy2W5*CՒ$X&nb3nf1q.Y q)Yuh~R D3l-v7iƷg6`0~ hR*:ڳI/V z$ W-u 3zΈey)`;d9/sPSLɊpEvZx]uηfWZNn4{`nE&-S}B|0 U8{--5ߡVڜjNwV}Wy|n<)ax ~868P݅3`< g?##3lRkQPKiv=˖f )}K4qUz}ü>7qRL_O% [թBCRWb#iiQdHk.&y8ǦCz-eRC+0LK٫) :;[녾EO0E\@dWH 1.0YN ;K[V=aHI V#t8}9 Puޮ?kgax L&!Lrd)s-<x!gk"c[K<^Gy##?| ihLB ╓dm4YT}׷e1t`vQCȓg &DX=pjM1߽ya5/*s?E,q1?^Q2l:mSdPw`H}*A_XD**<ɩRβdߨaqɶ c2:Yrms)ckQ50)<ܴ4؂F FSa{ʢ̨#t#MMQ:R#EY5kSҹlnϫ3l2_TF )2B&</B"t瞗TYu [Y1B+|5\|BI93}d44tw=W9hz:%Sx=}]\h?zR& zʆ=Yvʔ UNz1ϫpJ#Hv'#S(X#l،ʙ! ue>Ek!te$;y|CpLH )[{*2^d[?*HyW)T]k)F*\X'MCl5ⴖJmڢzʋӯEϴ[*K#`AE8;-"}+uOP _}E%dt}j Bq3\2+Um?=xK٠jTJ kh&Ί MD`& "N*ʙ[ 5*Jy0LIIbIRƓ9'%hCh95|5 ԸVX@o"سmícĦ/؛ݸ70![S8f{F0д1j/fu5K';-@_q!vmSP"an[ <Ck/V@[[ W-Otw ic<#c5"0/c8PrXLJ==Y(,B\/0$aj>! ̝3Mi<8N=] Y&BHVu* T <mp,IVje l`ЅqQc'8$h2baŦݔ$1uz+I_,̧Pic,<ס^0V0_O.%D_pވq*6$yJQWg|k[~1fX7R8\jӠgpȯ&;]X-=S˥5wxJ釹&wl1S dPYr U9dg\8$Hn ]vW؈P@_Ѳ5h'ȿNo̓smisږCL  Ř՚V$ۋ~hMZ1IIT P\Gh}ez" xhh`T>,;逓X]QCNxL^տ603BGc[fꨙߚ b Ѹg~b&ReTKf1cL8w%1)^PS{9!ò%s)1e>[Қh2[!W${'> E#mv3F%@W^LbQXGϙ~:mP n56ƌ r.*$pNrJ&ZO[4̥Mؓq>BH]%Su*Exт+DI!#W&j (Mmy?K/ߞi=C߁Nn}g$B6Rqtft {#9}iz/*"!f+!4Ceo)dZ:^?_P b׸[1;|^Qb]tqܓ:ЎtE>?V+BMSy:=ךaJ)h5>D9os&YJܗcd̊;]*FlwM'|AS-wRՙ^䀏 yĴacYGq(k'/*53d(߇냻zA.v/'_%7 cWuF7N %wFh-z>DJlt_IJ$^mIA,og}2x~k=ʚ|ZcUjqF?1֧/&͔0`ƠyՅa: `YW Kbğ57~Rn\Gl^Ь2#m_[W׍&9<`~,ЀH ԎQ!AeM ^zγc'q$s08>t@#zylniٶ}}HܴKBH AEb{O#RY/Sh}W{`@2.M`yBJڝsl7ܔቴ R$)Z7cMi?L,#<׍u2A'Wo 'NeGV^vX +X<vOpJ. ؙ3lS /h?لZS|ŵ *.ڛ!Co`vռr4›cw-yV,*N-7*وk:ˤU5rnl0`)ΞG\v>|.vU=,/+~"9rJJsB~wY33 xO{w c,9;H7!T}ȹ*>6f^0 (Mӣ˥?躺M'7)[N$%XZA U~,4;Zݤƙ&F g9i9!J\1424t"4/+"7EBC0iD,Æ"kFYn! wh읝w8r'76 wPijO]"~RQL$;AԨ-n:K[M89;8' }ȤɸApdsӾ"\/h@(FWSq#usj% YYaJx-o̩,o.bmiz^I!0\lTZsf^h6F(`j|!f\w~;u4F،Ǧ ?tifՎ 9ϝw77*jn%iW񣠶,McKx&,69Q;[]fۚ_ҷcM4{e+i%N{1g;c ʏ&O֏ O>H /iˮѶ>-R!ڕ۠AK؟R-R=Q#Y!.0ֱ-(I/5FNK0wp,)C[ p}R%FV02 ڇX*8NLp-4ec~3&HBKW4t&JpwR/zqSeyyS9l.rH c++%)v&H/8~#!n }G']v> H Y u\\oCD^N)_Ew? GK(DJwR)q|2,R030H*{@}?6v.׹"G=mѱi ؀X)A(Ĕ7՟8$z׫LYdv'+} }1p_]`l+Zq4A/F~`Wo5OI[X20k: #*/:S`tioh͒I6QzǗ: 5H8| xM5h=X @4$lgK#"u΢2vT~q~zdTMǺD&nΏkE#]'&lmpsy:$VXz4%~!P .؆!I,j,L)i!ENP ex1J1V&6f÷%zS2jYT%[iENSo),.WQ}H|㎉fRUz ϟqDVe>{{69/}'6m~Ǵy̞<fPAY%5 2͉q UVxre`Q0$MzJ(W˽Y_.1&˰ylKÎh)43_秿KbaYppA&VdINK@Ыmd>k*E8.k ̎5Oʟ|&fjJN&SO"w%i6T؛'*/}>V9$G }Ԟcj VE8zt%i6铤V Gū=];op%Z}uV#(J]/ҩз6 KsJVx8p%dtYOpЊ)eCS E{v`$2]} (#kM;t!Q%y<͹:q\Fd4Op*͇4yNE] {d|EdHNTX[zl0q9_]o똗 |eגζ6=Jn̬Z]=/|3}M#s0_ ߙ*T,p*PNzS +ey|("E,єPG+@=`|_=ŸwtzS9׏oLPqUzC~s;ngae3ū"3)1xCqp xM=zuۑ-4|䂒 qP74 xYh0P9|8 FV8o.ȿK}!=!㿑qeo|  29d(_#eȾ6XxؙGiؒ =+5>~mD;oꉀ6 K~ڟ NՌXm c$"%`~:)m}'p2W~ |g(tM0HW)a b ť.?fFP Fa*B؉J>ѐΨ|)%a jDnG*&5ufo+",0mciNV6pzW&I<76J8,&lBӬb4qmfxJ6F=SD |æl8u3D_oj1!-K\7 W9DX,gXdkSUߊ4ت#)qsR B-JO :wu;Ğf˪1|P2?FX^w+pY';qy OG=.&aE\>\~szClwA2N!::QV&Qn V/=tSU"f1 |#szƾ'x냣]_$~BOv&&QE>-~>\b?TO2LY,!{^m %z<ﾫ$VdV1:]BD+9vMx< rW)I*Nfq sX{z.UYV@f']0x) $Cu. |]a&/5)+K-s W)n[h rTPe15v"ԹO%# 0$-IV=tL =>vu!K7d$-⬳~D_nP_=@?0A!=MCE rŲr&)4}Yr 2z.zEtڵL9{V-9~!hRI5DE3ڥ gdV=ܬpd~:xħv0?yb +ID`ZVJF15`hR2YU@Y BBhd° B º`ôGtܿRLG$5.k\SÕ^%us@ ih{` @DI;yfvW,s>Ј_å8R+tUM>mL~:e(6l8;c9:J^_+Ńa1YDB`؁,Bsh\g6#U6(z$5"g=3̴.Ҩ_K̼FAOHٛGl+cή%u0DS3s>vk(Ƕ+ qY0'g;:5<*{=CG^sO='O HyL'@3#0<{X7:5tk2}t:sGMYR6>avzrGYgӓX "JgԮ~α]*w 1~yotIf$Of+f:d?~ag>Hu MS?+]@ruV0Ϡ*1cޥR"FO Ӡ3 W {G.w1Gw9GxB(SQ`r~ xhɭqeԡVjP75%9ŧ.>$r&Yҍ,ݓd@e@][HYOH.ٸ Cvht ~Z IH?$ͱMEqaL;B>,t$g:P#Vְ8- &c:yH휂1wj198FQy( R-Uql ZzŒ* Ԭq둱Q*SK9I:z%qsG=st#Ad9CO"g K]˾q{nqw@` LjiC$v};W 9ӆQ'Y )҂,0z:%r.w:k݉  ʖ;f'KWt}5clͶ w L*r/p}rT$%,>υˤ@[5hs!D%{%2ґpF8 x͂ޅËvsYXG(T%p Hҿ{%T?Ŧc>J;o@V`mrH҆δ3Gm@wa6[g=j0D&.@\1Q~[kU_NDϵѼ t ȏ‘ygnc8v=OaABpyFN}_ !Hۆlc^ 6%O")˺RA>lU)+J"R몧V}vlhņ}F*I)J!ﵜψxXͼ'^3Cvgҙ9gNf@n։E_:7h`'<8$ՔAs:mr !yĜLMx I1WF0'q j;-4ꄢA82mɨ(_~ `ȋET>dɑ;PQo2EL!8FjJ.FY 2kՈ bK BUydZ)}V^<@v&wƯ>1$dwIb-Twp<N ڤtZGNHx!93K/|*g"F_;_~AWk]6 M^*x3 JQ}V6AUL.gB^t8ƣQA6˖"Agr+ϲ/ϓqJAMrCI3z~bHL"CE}n ) >%!m@JZ6JҀ,fwXߺKqm3sMņb1}g{]n63Dm=iu-_UW%3QY _n&Vj*@CŠ%(sI.mb~?뢒2:rdQuiЩ&[}p .~)Ap Y*f)KIgm.~Ee| Mhz_\T->&O|/43p?gY '@YV;Ec\Sl,&ޓj !Rr놅_`a|7$6,Wsx<^Rt.NAM2g $]Jt>:psʮ[֡3o{@E#r; ^e02ܳ-+DLN K,~T&@.b8zKg\Fv&.P5A,B=`tp;dחG=<+g'C* !dWls7${OP"(M~OEy~Q-'}?pwikdM بN(OA7~j8bV awW\l1\-KQ5IAW# V0Ёn5~ #C߹sNCAL"R6;hc3#BtԀ&#Nki">^'ǝg"pdYn* 0GF(>zm~3 {WO%k}GbƞD"`Ģ7l Jm ݾx%ӎx6[.._k{Ι4y b0xO9%LLO=^Ѕ5]NS=7QXɎmJZ /7x94}gq\Hs\JYMQ@B3l?[g/詯m 7w`j ۖ!e" cKv:^ DA5 }OpS C+\oAF[?|Z%x-$2Ƽ)'W:힞HwNb[|,hkfQu{~j4s%qR:4N9)wUSCn8C?Oz7G{][RB*8Hs%c8sejM$&`ҶpFeC' 徨 G,Ftu}+&S2È 3GX5%mC a^nO7*ͤu`1~D)4/®Ar?Әq泂aH ^঄ك0Vp|H)5avkZA/[ۊ|>E@t}kK1YoXPLu1 nj~Pfr'xA|DMZ5Bv%Ys6)3-gj`M)Bx;))Cdw*G0 Zgl2.2!^>][f@k^GYi;ЗٓM''8WCpP+/So TE>>0FxEFab&tRh#08y xS5=I= L"fv;^#W,ۡ #/3%r0/Hsϐ(+Vmjh!Ѵ}S &1 iO.c`ؒ8jqXqJN]Gr^[34VpMESqa+䕚Ln&yx dX4:`F |Nqy:T9T2 B1gFz76od&| -lb)sF+iA+1g!Q꺵ųGS&8\UbfPb"5/n>ƓN^¿u28&lMʍE&)C~6zGCl7.bRmPU1iw vL\"cU3̳IFnP _?eaKRC>x%~M !Kb|ڥڄ?GH/~k>:<g}`Vg3n$T՘q{2BB9͑8@ H+—P\j{c{,'}ѩweAXq*ׂddяxb1\Gh3TV}5cōh"wDS*h,F\Sb%&%qU ˇVAkoDU0>Or z='rd U7&Eȫ14dOrLlf%㎲~tgOR/sbl6 U~` %%Ĺgx' v>:IUhV^ad%cOpƮkz'z%ޘ5ڟVkI"Ծ%}filk8ӖD^[&:6e9EI1n\>)+qK|f=1,0X'+_~Я- >b?xYZm"F:~ϜO/fB;2?}kRgh-J"dB-A[A)Yݣf@AK:S@NټF?aGX GP#M:\[bY"Ep\K`;X6d=e}KOBb9iL,or,Pz*UawBX)|(!r@wrr%66pP2@{Ś-߻߻B@hl% %q5O(+ue>5<9Sjc? RbP?G}bW9~/͏2wRܿ]6R,S)3e/W7Ёo!=D09UԳWf ?j.]mX~} t|s5gB{K;H{ٷI) ho"}jmt@T# 1\%x/,y뛣IKn|c՞PfN'u&U-v PPE!^A2UnFCg6) ?i~طqT^SZ8qJu"?%]z;p3=.>órx]PIhyEFdUKO নLJ>2则w 5'p=׾_PĊn N)(NϵkBxp3C`?%,bhw3U2UlIoi>D|j5Y/ϩ=JlｆtiSF~Fs|W}Mʞ4G +>3mC. ?O!]2p≊b4oGFV'&ykKaV΋uZqToa=;>7qD<* 쩕BҀD:TiE$*ֈ9Wڢ_ X2z̃9$Ot:tD<[Q(. O|!"ېm=u yQXH?+bы* p65M둀X5թXɾ95[E3~JSt-fgވ?f08.WV l|qD-vP"Ӄ?2'GW16G$j~{vR}Y _C7DYOTo.^VN2];#ԩ=!O~"g!YKapµX002\'vYt̠b!wp({XqT}kh_@O41PZ{*pu6fm(vDr%gNw }٥c\?"rr Zk8$Xu07. yF !h'Sxdwpy СY{H<65R;9o,ćB9!/tL2@aA `l1RS1 _q!;=c>0TRy柏JB᪎9XeݢWcEt0)*Z-L_(%v)AښN(*t)(]RZ/)9##Q"5*D(3F&%Ilb AW5V4sʵyv,o6UpGViK);ȷ(hO(üf0#6O8*ᒋ~Q̬ f#|jMs 9J홂25u{{,LY$sUMd)f=jyaAtϛI/ۤg:#b=YC9àK{׀p}[`x]ﶽw0.޸:a,n)gm\{DvG2xWa;ًXa wV*TԙeUl0M#M&S:O`JP|Ex}?|0}_^tdW-7UHYB]yՂT|~m<0&Yc}V"YuQ5UyP 2B T{{!x_mۓE$S.( Dr0`ksXIFęz%ЗwQ2^%|4ph@QsOky *TF <4+m#D>\4gTdIh.q=2J!u#sjhb۶MU?r|/W'p|zbnm 49g_Wp[u" a C ZMҔ4c\)SI׻eϦ{<@Yg!; wkt qZ3fI(!64_(,/K4Q7>/ BUʷWc؞ _:u'lC4r{q@tTq=(V.\xe& ՟28Ϛk%{òfڂ2ue.،޲Li/nsA'#v%3CE.8_PtYŁƖnO*1MR*5 ,0A4 3]2|\[uEt=r˧CVgo+OQsATwISt`UK,JNѝmcƇ;jzWC̣!C5m0DsuJrOJȤP3Xz"z#RC~U_ĝ<"s13f( Ķ|Vg0k$|x)TʯSTIԒyj7pc/EZP}ȢxІsf#ZܽU"c#L8 YG?`C>Sx-:Fo+Cq ->Ona6g;w!rVb]`c2ǎ_h/iEͲ?9XD}h8@ 2ϋ)DS2ΫYʕX&)DTl%H y"Ӂw5fel矵8@EC>RfګBZsrd q梖ebCi+SR^c/s Bʣ5vHv`R"ATW`d r?"CN&͢XExGQ,O_(gF/,L@Ak||p*Lj!9qKWSwJ6l:Bp3@~k2_XK~?_MORO=B$X_2rL؛sA`lC`XϣPPA} ;Lr4z} ο hAGR.6"x%?(2"7ʸ C `0Q}4 z=ЧνpJҊ._cyvSij[Q' K=<7~5Yq=8wʀKU4o/5t y(S|S?n-q~0\-%c}b| }eYg` \dW NhQ8!r7rA0}*J?,$;KǙ9(O|QX4!1+Gj#XpjYT'Ep};sXK=Õl:f20$LĤAVR'}ƳMvlĊUTs8eW"x4Fɧ{`Ɏkxcb+f1EBYUOrw 6"ێbxfvѢ&mAi]O3I{~LÕCهU|$|a^aa1QT eB]0^+ !1GJ(f+xh'T .d*trҸ7U)>=!<s[X *InQ\S*LlMs&H^+c8~SM/6*'${5*"rN-*;A VIE LI F`2ċЗo yDuÓ]mɾrTtpm]q^u5=\[P9&8SC%g{~ E%} L_ JMVj依_ a v |+dsE{%!qwP,ӑ.7Љ}hFR}y7yn\2\(CK21E"itO:F~/8z3PS %ZP-fX\`{*t5l6:'-ה2¸ZV3RB˗);MX^2T8TȲڈ 'Ӏ{:}$wLc: f0 899eLPPSvm%Et3-]!-q+훒IwU$ɹAP`u =n<3GrNҺkHuR*O9٨b|6 ?yErT]W2jthL8K]>ߕ|=s@?{'RנpR< mפ R 3/wD.A*o:칍\94goZo|\*\OeRQ?Vs7SA a|qD럟 ^8>[`8LE#',!NҟK[iܱ>"ivM]da4Sm(/ %$׼ E΄۟Ttgw} '_JY])93Oұyƙұ>o`;]=:ؼ-+ Ǔ)U<#kcP80X#MČN۔&K82̈́^F*yNO[]+{͠2dYJ]1ry YCY~T|nqO@6w٣k(üT V(RPT .G.0X"p[ǫ*K2CO+I.6a̠e:!NY|e?ꮡs#}lu7tBr(\jz=45BYsԓ}R+;1{ RQN4/]RA\yɸW0+A/R Lѭ6H\FӪW4}7?wv/y+HP^ڻY}#8;$б2 \?A}E:0 5e˭'{;F3yjJn5MhL԰Zga_`DVC|cnKUul qF}@LŨ(tvTܥ~ZBjv˭\5b `fn h)y26 tN^#xyGM.X~=G 3&@8܅rTU~Gq>Dڼ$I7J'a9v!!;δ ,AFu=g4X0ᅰ%D(߁,#N52Jkӽέy]pjAe~t9yS; [&IiNfC,G$T'ΡiqlUD6ùC*(6GeA2*¡t=E!mʤlʉdK)S)繷Lg=C;AswK$,C8 OFjቷQlldC儱Η~ sYwIĚ9ױk2՘<ْ 8i 5]H(io誢h$ˁI)OrSgTDWybluz\`" %aWi|802 K <F T1[xAIVKI)f$x}@R_eÂ*NZZZ]8B7p=/ӏI=&p ~`f",`K[O.ڃn/p65i%"m[y ާ/̎k (q[T¼axl`aEu>\@Q1{՗e\` TZ'7jwVՏ$M^;W{/OPbB Ϛ!8NZ+i<3kto~]!,ش4gNi޻#۶p0 B)qQ`ԆJu29])\Ĺ_8mkZxSQG|7"xڮx^Jnh {ckm AҰŭayH <@N-fpTak2y!4Z徟afQN\M_ZEY*tP24q"2=~oOrNFxQy\#VI)ڏ-]Kh(6`sfn\2*q܌٧S+cpʒq ~S+\N3ǫ j7|ک7nw{1D2uQCS }"EZ`MW5$,2\g2ZiY]hdJ!OT7>d-jXjӘrco؄C - EVT9:/UMMk{)*?@j9 h2_pѕ5+], ~iOp㈋(!:txeHM*\a"A#uw%9>VzDN,/Jt'Ӵ_ںvoZ _6rї!HaI[{+vm35; ;O!el%fK[)Cq֣_ch;H,ZͤQ̾/t9m:edh0{̃t?Yu4i}h,.<$W4\0!hs(F8c__04Uy~L6N[0>2'MI2$FJPn(6# \G~xD.C$;mȰ﫺IFosuWcιK!? %ɽ0591jy.Gx^ 8%M=ybo͵fʺwi- UBs7p-QV@hZ NGarYc!DKsx[\C+EV'acYm{ I. z]˦_"xp ^GCZKUzNLTE@cp^#аUCHhywLQ $m#?u.h rj>0I'̡.pO3t|C7#ŎwW2V'-Uŋ3X(1~%gk[8C\y18B~+]ΎЋM-#:2ND&'qGvbh JjZjpq׭C>EeIk_,obʲ쯾2 F!MpAݓ+ikg\0ۤD;R]aL=ϯԸ<^  ݗM}T{s\dstSaS[wݾ] d!ci5hTqAYLCun||cfpE/9ނ;zc Z~aiʩUA'W#߻\رh /x\]T}徴 bUdQd}x}d'Umi2Y"FI,WjIX\I HB/.(u/'Jg/g97(0>hʜ\/HJ0/"%0(^#5:5MϜj #gmPBˍnzpѧPy#ΤivLHS$~挮[C=AOɣO@`\W;ͯ+H??/fY~<\Ɨ8R Pd7إAp4%/h7Ü56lFsT 8wh Tk5%Vx;?>3̵b]n[pX{a_ ]5 ^QdX,YX-睚{1-˻/x| y rږ[^0h^IId`>}i|"M)Q7`ËUSF*yN_[ B81ىq.k PLai~b|U<6.}g~] dY6ß<9g }b\]Q@5*xn_vjakM@i]<cJ=>BՑX&>0?e VH[/=qNm0ݜi2 $G]mv lҲ 0)L60rÉypmg]5oL;wqBkwΑ x~N_Vxk 6L4m?ulhAr. R"8^fQUx'WY^ f6gQ,ΟEnjU`qg|Cbӽڅ6o2^e#e_n30E+o{ INq(x8s5%g|'E ɆOy-nluj"rP1[0|\ Q4AP;]F5#D+d mާuX]vf~qSJַm-ts5v*K5`aMF%%_7PL`Py{?<IIL jl$pp$9wK|6sH>,E[>F2[DM_0Nn:Ճ E$H]l5.ӽvd؋S=,!v^A; W0EuVh/vxi++n3J\|pbR}<4Kr孮Q9[qRv\bxIV"! me9+] ;qHofr婥ќ\"ge籫pN~Lχgnq}#Ob+1inZy K/#}2<0ꭊXQ䕼`]/eɡqf]nTS`huzXdll"l޼$dUYoו2"om.ݻ%n%L nXuy)²v6g w{Ɍτ6.}|6[`tnuifOh}lM)[!Ynϗ? \Lɨʈ>O`>g-&\+ؤ1N5Eb< %V$re,"V@kO$uKBg P0\8,jSlz򡱺7PW0@_ΡBE?5Xh 亖&-ú-f;݁+q8W}B8U{9ooȡ:zgM'-hG@a 0av8[OۗӬӯ{8[zDtlZR9 iP;&˂1 01@rﳭ$ ybΰ2;=(HE$8D̕*<"`*z#%13MF!4ebK\s׻:D.T jr_p;Kd$YXԱ[xV][-t=AEFx!_ 4P Z2}[ <{f U!HѨ"cu``kJqj .h b@qZLW?À(.wF0kښb ҕN.%g>މǣ_* .fwEc/bj֔'{R[oՒgy{$v A:!;N Ҹʋ%ӪY?q%ِ=.`HF4m ﬿V|R|1j{` BHKD) *7ۂ Zш,={UյLG,m =LLQM.c4/uo&p %[g5JXHDߊ6#`s:+ oFe eVRjOt,vir?-⪔ `N4\";!x4VifŵJbj.RdBq>jeK֊iM c<iԉ57 iFp"vBCCqagc)#y'^AF.Wێn]v9iLہͭn@j)}w l5P_HW۔R0PDzoaȣf*o(?LQXLsjcJ#pw=X$\{byCϖ?(O2,d)oe4:Rj8m 7F0-c_a!d9v:_"s~X|tiJrw%[r n+0?ytl!]kwVD`cI3쿔bW3P;uf.R>x/[dRmtWI:*`ER.:>[ccͣ{Yaʟ; j a!F4ĕrg]&!'ozvr=Sc3!ϣtf}8&Lb(Ye[uǐ> ے+! >0{>,;ЁP[AUXRpp8$6auEu ɡ2:b4y ?b|r3Jļ;ڢݐ;~WvWfL%,6⃶x=""_EE]x GT=h6.!\HHe@Lk+*ǀ+\F׷%גĐ!}Ã;;%0i3<چAQ$,xUz }/zSbeYZh9ǬnXB/;nkS,R:?`5E̒L7f*Z,r]5ұԦbR ΋D&2C\j{[藴4#']o0RCDH\xXwkeM$?!]ag19l99]_5 %$|St:~]LrFұ;_h!0UH!f&T l+~oܽ? T U;TR7V/Ej·m{sl~~7MNjjOqF̈́O@ {4?y±';2b\7.&񬳏w֝x +N 59K z>AkKKMkGCi{Ny qZMAҌvdNŔ3c83 +rWPpu$%9k* KkU+*xnOצ\`]ړxhoU!09zӛQגW5~n 17Hr 28Azk_L?mȗd6 SJ6Mm[gxZI9xL`pd`h>Uy 'Vϛ<Q0CK*.K aQɎJpiWL;%k(*_z7^Ahh? o}BLocp7cV(&⻜LȠ;b@T9Kq'i^yHE!E*Dv!} @>z~0~@sm%J f=Dh'&.P#Ѫ`ťQx*6‰H!N]QgyJcW#;H"P~=D(B󘄌k yVl0gGvѩ_Uu+|(ywAG'D)i>V֡e wМݼPKegװ @v7)F^\J |_%$QULzFNl +osāyk5?.utIO%nKZ "FuF%BHuҚvwQ c/ v9Q{{z:(i& ;^`>Eя 6pҷ2:X0n>֑_^16%CBtwX Pzr4UO*wlٲK=U_ Z 6NaIO(WˎyT}9A5~D.1%{xZ%Cr9Ĺo0-qhBÔLƆ~:F>?AEw~IT̆}ԭ8 uUc(XkBы^W]w &5KSЇcCLrױPM?H9`W( !O{5tPoa}MWm{ÒpĆORCAyojCzpl2#LI ߡ*|J Eݟak,@JBOOﯢܼꜰty8DW#Lܕl@HEup.{7f]v$Y ɐɐvDR;b@R럗z toL7)ͪ  ΌI!Q2FTp6Gan8r4as^5RӦ$-}H aAPHʕ/Cڲ;LaqI4jub׎Ǹ@N=Ys͉ -D루`7[4dJRƥߛCW.l2B+p$q.Ўt~z<3x \;hۮէ~UJE4av {|,΅> 4DP5D@GpڈVH)0cb."DN SD2(#кRwR"hZ;xsǃ{!-\e a'pi JV6eVTrH#姮*\w< _/yFs7~vM5m eo]$"G+hZdyF =͌A숨2jܺo=HeK#&)uqLi;`4*c_ "gr'6x+שw/>P;7uOoi(@O% O8 * >Zn2m4$Ӂ9!^b@}Zlwˑ7TJt!>1lU#^I}08X,kGVl /U K粧>,mdK/w ghtf)0G!nUNX)kTo4wޙ'MWOl3'.LgJKr>Z=b=}džd#_uWyJHKب =DOU+Pd׵"OGIξ.u߷s^ ;S̔ñraoY\e 5  S pDf:d{xLN,hByv(N< JG/hRļ2Wo,˳SZKǤ=;vO !@MUmt_)A8&K>I,Q}kuL W{d@g׼48Gjg{[:l,H?nGA@4$7i1/q̠KpayʉPzES RhkZ Xer&̎al#xcm \L\s{^4A1 T77vèґ 7_Va;ޯra'W i/;aW@, #&A\P[12>X$3q=Xh-A⵳mПWLLY%g#zA# U>˟(J2 )*Sq%SG""ddk6~;|[hx*piIs DUKHlBPml† )@xMG]<h6~۪`0y3s}YhA c +<]x6J}ZӔ~sI9Пt~}X?}ej1m#0CӲ}\ H@ @ wtw&qjB˙\UDmchҙQiu 2t~dP;ưԫ~KRPW]|avn~.8/us5An$,F&,)ߒ@ej&)T{'HPIԒ㈊5FՓ !VL@z [?|_4I-{gI-> QY;d&ӸTc'׎zrȹ]@ZA})n$ >rsj J䠬XcgW;+2P؎ۦd_k-49,vgϫ̧<A_G?fy )p\z԰8>RmC;\s$>u2I(xҐ=c@Lj4JwW1 %Eݪ x *і{Ggv65k8R*|U$AsVxgIB=;2_!j6J·WsW܃[rpYl#*0H}aܮ@UuNU|!-Sff[ѳ3~,HJ"zK{5eh  |Qp%݆kFr!dPk>2ACpqep'W*pn[_gſ+c"/~RDb>68i05 C<'[Wp-C:r(w7DTM(k{l+ -~R{!Jez>߬}Orӵ  /hY] aY(hs^ְĽ\UL F1Z@7鞄6VL VgNKU&HE6WUzmS"Cy8C+\MWo dn:I7*\0ʬ1`OrPc[x'^$h9{vuڝbyTN 61 h[5љ}nD" X$'R@2!+@`8KT KdvL ƥ?fJ"`;U ɇfմX&6I,Vr&/"$vjp,Ty GRK${2*0@Q:g: ?ߪJ L YXۅkzo_ 7%#^bgMae. 9Ol& aC[ Qw8(hoP~Ø(~X>h/]af/8Ͷx6=aIFȲ ) Z}=[Pu{ǰԾh:G2# .e.=B;CTT\(cц`X< u7N2rՀ|&ads22V&gu" ]}[|.cAx[ K]?>oǝ*Z\MS޴Vh)_ha/CHk/NA*REvpfK%+Fߎ*)?YYKgŁ/xË(1H$qE'A [[ٿ~U F`&~PʩC*7Ry{VI.T$ЈmKI1I׹;7V Rtͼ GsU WP` Q1X6/uB~xwlW۷&@UQ͜K^ yr ׷svw'A%yXV<^7PȊ B$qBe;ffM GUϒ[lY7ݴmdC_|e @ c y^+IPEp,B28R2NEWIV .gQRdL7 ` /F cOHЂ`{O|cEۧ[1 ٝ}ۥ`Ҿtga4ox@h9g8VE^mqIqnsmjKV "(B8{g]$Q1x`.G׎5w˜_] ~\˘f)N#Ʃ*VWZ*7a>ÃZ eO*dli@wjn푒7&ӨIࣾfq!P*+jni[1 5a@zdŬ#p;ܷc.VDiQ9]K-ynR=1UTZ"]838Fۢ51>1aLz=Tw'2 Hpk+onQzX|DWgɯWLU-.jC4<ݙ؇XZȄLin͘!C!Xr &=Y}Cc @@W}sEsxÙTmDŽo(%wWHont=R0`DL1/V!dP F>AUjAH/c&iS6U'<ȿ)~ Cǂgf/Ŗ@;`g[=sfe=~$4X^q3_W@"f6&jm*Dȓ}0, G%#[܇VԒDWa9&_ڇMOEhGB+*A-ҷ6SwQc t"9oAo-9:মW)1Zhlt@`+8\r$N*]imqaa `l@ 7Аml!g Vفt+Ŭ|sۗ&\7رDŽ}n;2^̙=x0H ֏|4odnZŽ9%R'QjF@l+mo1`'],iVzIm:IY'md"Z] /<-xWy[p<^3Tl*]#CN_/m@)j.,!+TKW :d`>,X.'z܏WdbƧzšF?lRإUg/ܜkyv~Rl]Ȅ[ i`s EL.{7{&L?G̓,BNjZnԕ_Xm\'\rKh[*4Nsح]m>;cOT Dbt=ǹr:QP6~8,x"R)KŦ8ZY*t??Bz oj0("=wq \bL* ohvIcjAֵ(KȐO#`;)@MЅs+a\6!˝$\q͘C:3Dpr:Wĺ p0tPKrwEbxEEv)ַY*+叢zq9*H@XiK]0CXڂ{?2h<SN9c@R9P&:PۖEکn0T(c _U  S;0q,ufti.@{V] ?׋A.oRP^-WҰUkn'[]Sq&-l}0\]*Վse1 c%x﹭OԚfw7?#V;@QRlaoQ:{p|krFE:B9xt5ɛ)k4!j/?Q nQRς(r+zSWfBc&6L\!H8@.YuOVf*oQsfve.Ba_ pWY3y [$"p?r%@;)Onɘ7_}g;5XSڎnE{Kƞ"拿_=ަ+q%6&|oagӒ_oPn?L떏n~-Agh~!D+=7f|GV, ,g ^XxUihaC[ĆTOCMd*$[[1U?W@6$S@xҭai!O8jZ&f>ub (]d?V*rʋ"(s\ Ǯ2D=-w0F]sj_/Z)6H 5ZCke^XD-Ȥރ;~+ XKٶ㙤\3t+7K鿫E6uwD{2p#F1F8 6`ҫX I_K 61$,$=)p ky< Q=|SٕO.SLD_40hN@DՂs/ɨ)Wi~M>@px7.4W+X6Lww4.)C#[UENC2Ṽ(+ ؄/#!|-{Ujh`~(&E{ij:Cg{Tq ǹg wPw5h[}7`~.P>GcPmsBϭq*'Yx\_=ATHב,fT98GxWt `D[@{wL6"sP` `^0A t;ĭɪ ( @j+ xa=$OQ8: \i4Jb)isy4jOԔ䩳/MTuí5l[_ͭ!&Z6R( r̢z^{81#{3' 6z1"sT%G\/|J7}SLO ۸շP+/r|jqya]mK^Oqq}8gk7Sޒ U\㒱b߻N7^f1$ `뒝9TкI:&EswN=i:o vl }z9N.b4%X8?0H[/o"ы{mx;V!Ka T<ſH#iPEɯ 跄)^:~=#woc0h~iʑ@IU?i>}lRZS҈0L+.I2$_m1H,l*<S8 5)W|l xvq|Ry1ʑu!ogA) O:Brכ{'CAu$C({ Vݘeе9 leN,C f ?vc}O hk$ wtBѠUw^H1&΃$s^Pե9jDmdJnfS˘͇8X?2JɭJ i'2ͮɵ-([PHZ*J (K5](Qi c@7dB#Ra`7mK䩸"D@\ &j V cekQ6PnuضJDSH}njDG?!jJ$Đ/!d9 P~& s Mac_*4DrKȎXE0@G.2%n.boېBJuyd>Wph  '-r⌾}㗣=_6N"G>t-;1!~8}IJGo0|W}8&AFM{,WPVg;H;Mm_ q:"G>AZmyzOMZ,tblIaiMY=ll !F(:l=k28MoQ%*ШDOܰ`+t{! zp,*hc؈ͷc_ "t& \k%Zg CP:Օ#=,n >L/ 0"߇?jf"4Ɔ :-֣ܐϼRgSK cSd: d̺] ԧ63Ff<_ND'+i􂞿󻿽c<9DGc~T#OU}{#7͹PtZilCASHO/T>$48(}7yI&GW^[(;:o>wI-DDdM$F5dօbq-4ᖪk e J qglY [S;oҰmA c6ʏi5H"<䂍FpsQY*§"H`zC"o)86BT1^Bw8fL{D6 aw?ę< &V#{Υ&3 i8 +k4k[JSzjcx`榣cςc{(ȁ&/gsouF9-a#ɬ :J13H@j*bږ3/LͿJDݽuq@}V >2ds윓_IT]hB'#HK:7+BˆQdF7 aR7ɛX YJ  w\{;Qy#}&ɚklc-V74!`cd֋ΚaG—? qʧ֛>b$o(\Gx+vN_J zHՆ=5~?1Äm7zo!x=l*Y>̈f "#Ahz⿇dfT.IЊ#q_Zߚ@D<vՍJFl,҅M쀩0%V+;Inp3M+`i6sԷ O0Z@ug%^NE^RNX:$,E9O k?9ֲ y1ژOBN I;HѦ8AorMOl"NB&9,p:wv"kg?lG>GGc#Z23Ǭ 9*zro8؛I !y#Rf5PՄ Zz_xܜf԰8SHuϕuw9'52k-elnd$ezNL~U7c"1c@Rh `:zw% ^BX4U d|Yag8M(-BO~!OЃ sD4"P+9YY4-1SG6LJI͔ԞR+YP<3;Fx(z ]φ#_%5&x3 m&t`YiA78B%XTE_TJD, % hk4P~R`;ocjFKUYdLI ­k/tާQ8Vkuxȇ >8%_ԲlbKȒծ-a%$Ll0Q OB #mj1xaaNd=*|mч_t8LRoyM)y'/V4?[T( \5  }Gz<{q @%kh,T_jd>5Ntsgm2s1n0g,c?:ec_g5!8m8Egm3 s-dbń$*.D>?}6!݌CmRS@@s|o 7:P'[YSȆE,3/h!^S\ a:0OG8Aj ~t .nLc2Hpgʻw__ ٰY#迒ȳ|L9/^1[S ۘ*]wvbJuuztz^F_oo!/'fMb1 D&WÞJR( Kw-X!~Ԇ(]onˑ\i2$ԮZCq UwKBe1h["r+v.}Us)/1î Dq>zkw5TW.P^kpQLU [ WK(TZ&Xc?@g\wS0ED%l0vN֩ͻ6TdYһ9ApTc4nip:xwxp1e#)J];|cP"Q,޼&cȩu$ T՞$: 2q?4f +0xEEtKbIT+ r۴O:Өn靑c- xUT XOǣܡ='ӕu"i ', [`f[7T@F譓)&¡aoP4H:ךIѰfp[nFy/0Vc/V8dg'xI}$"{{86@iq0bk򞒘QzJ3U(0&弢Gwt5 tUĨ8{(('tnao{LB옟=J`\[!sfiTQ {g"eIW?P.2BPTe?_pqkCh׎ sGط}ag5`1@!c1CS#o]KIF&@GKUdIM3#@iY~̘*M^IBl[qYdq#k7?shm2?M3u5dLBwS0;V8Emy | .Et ^Z#421)TX5fi'yL(4ra;3؞GuE9P"{> LbygM9\7BfSN$F2^~4" @ZvJ[5gKvo(++ZH`Ia}ovL aS+TD?M@2&x6$B:Mح1jXVbq=Ue7ZK6 :U*A/~nή# *UƃϚD:)Qv`XI_am{ ,"E9q2Si<%ڱFٌ'Q$}>Adbp1`vi<~UB؞Vi Ě?oM`Ā$$|C&<6p!(F]5j9DUb =YJ"CڡژZ Og_NY/e_EZ?KEVnxٮ1>FĆiԵ:tIv3HWѢb*x̀eqSe'm㱾H m]rPT;xxC!*ooDk%W7JɛOK ܚ5e[@o=Q1=vN]Jl!A7{Z1U - \f'5e:tUz*3롚X.`r*#hPR6 \%2uӛifg١ɋVm}" h|] "uy'<-j*>zʷ~%eh7Y C<` h1VKIջdg<2H#H3Ƨ djc_54\..)Y2} 2?_p.&r$W['gdq|~P'a޹bE\g b<Еópzd A0 K<{4zb5d#'{O8Z[% {t G=ZsUSOh#Dרfr*f#~@PlE2#}O(by$gLUͨpdݏ94gGHf 5<7g)n:T*󼩿 F@q2̤u%Iq3uw]mUlJy7WU>RqI{"^ A{ Dl˿v`y`G.vwZw'#Dkqz>SY-8>>T:TXB}I0-O>ߪ)< p-I@w/|W?4C>Qx.r99'7Q:8Xq p >.vcdD&a(Nљ/4Vg Y>}bh.B=[ODѭ3ň+w<[YۙY]P;w OsV{d[i2xD-Қz};rL$(-E8lJ-&l{Ӆ{`v}xN, GI7^LIމe9Y %֣wiDZEkRAuRLQdb@˯g"g`ͯ{ 9&Kn${dB|dM5PCA+bXg Eڀom:97l罹qKK(,7Hɫtx"vdsƫ /1Xbɒ 3pɂRy2&َ#tuJ3O,J[0 }VVN29ĔUbbGԑ$B]$ؼn"¨V8 Q"uxɺ57JMI{;ȤGg0[4l{=GY9Q9mfGTOcA:Hr':PnXҖ6LroVL]|\_ʩŸE߅x]])g*Mgc(t2tX'HyT){Vlk kTOpB0hQ Jd=?>Xzi//ԽWddCСmV}xoT[;&.JBHj'暎)׏FZT)V3)pp]:3@;|8gXswj,1o~gW8l|\RST5H∃+Q-Nu B~vEPۼ:8h dX>8$|rPrw7d QF<0۵s 璹12 H|$ Ñz_U"ʼwXB.D \}߽%')qN߅|AN/lu"/|/F~\͖=-Fsik b—aoĝR!r}w6qz"{ș7 /4~v! m)!P3=~&\C>Af=R䗅V5fRް#CSOpW.n"zߏ*5EzR9@;^9r,7s;o1p%7~F $]s®uM'r]r], V-Ή>iwWV^~)6DT"/d=J/F ds8%-sPZr",qX!5C}ޮߔΞ). I[%3-_,.~!Z/l4M 8!^,sP!Uovf^a.C#%#;$z;V3xH)xH}a)滱 ܸX`&B^2\KmbWi pldfX9LgAH; pT܊>c92'Tt4RS$&;|K.n)fcZ/4Jxϩ"%VI)'^3`ݩ42'a5Ȥ}’nL#O8D.m'89L\])]WLsҒ{g|0D0,1C,w.]P&ch2:+Ç>S d0&譶=߁).C:GHgXp[6T'^#\*TJ .Bcv2 ZUR">B{ 9Io VeVp}]Ca乩:+?b2BBNWMP˪i٧{sÆl3:eEߊCT1tD{EMr&ǒzLte̓3&r@r7M"Ypet}u׮q~[u;B.58x С0|=^9#'iU9$bYݙ\Y*J7Gu^l =JE8FJ`^؛q0!lf'30k(b/0[ lI_|5zX"&482 k4G0R$05ɕ{7nM4\R/ٔRZ2 Ī#Ӛz]E2ǡhA+kl%`Xя\_d$BMRuS?;maӺ~Ehl}rh 駾m&H1*Mxi5 06|=uKZŎ#wgoA< C}[S]prv*R~y' cL/nHòH7w8h1K<%}Ӊҧ9;9l#)|HK7cvT\0z2[z_>5DVި`R MŲ}*VP/jQ]B bzҲxȝRsb;3ծ1jy Fˡ<|z\S-A|XK\x-/xv{I/ h$%x E)'Zgjw[Xl+L@ʰ1Rzc+MEw$93?4fR58/`NV,eW?.5L'*?';oMI?u1>gsGr//{ z (rOA)wnP>g0Ui>+o=|y9K%U@75U\({LSVl{_wH u̎~z3D|ׯxWK!4t B=  9K5gMVa=s.XƤx(U[Y~ ;ł|d|tW4/$MZt^z1~y>2ӇLz)o: ֚{mἉfwC.%|0%$/dbwlf~0M7ˇ(! U;˻Aӆ!g:ݽz]&Cݕ^ Ź%^[?mf:J-)!^Πp ֥Uޒoq@} Rk}Z:ly4,#l)?!nnMr%:R5lŽ&gL**4כ؋J{e77{T'@Tw$b6\ڼ( <Χ,{/uX O<^-} jCQ9q\Xp ^SŀCϋL#.`#/E{ms>>jy- 2BlV]vS>9"lPD¸Rrcm=2GskL2+Mm_,Y&BT4vO:\U⳵?%},Y jI{>V59NWZ9/D156O.[#0)%ۻ<Uj*a yZW3N'vc\v WSLfs~\:̓qeRн6;NN̰̙z΁pՈj]ov0 L_Rs J ܹ|2q Tly kYU+Z̐ ,U7K6S4bG/u^&א?ϳn({ʾq"-a#LwFMru̩ܵp`fӛgo?cmb2[3>e$f~ ^p74d0u2[9ϕEQXz;*֐b8rT#Ԋj0"\ qf@uċAC0͈bVIt!kV)״`r_'AJRpo_ A1xÙݕDU2[<"MVN me 3KUs8>gɓʯaJqY*Sj<\ ~= G!wu}?$ɇbS귁?cv:@41$O(^kh2͸,?ݟD~NՂc By+.;6h]ckE!H/pDZ32M[JL ObaQ Vds#2zBZ9h ^84.4hq x_e$HP+̅p@uS6Eo<#i2Z]{1 yI2(mY#\Z`1̞ګL.H.OSqh=py㑩)ЮQe3i ^!'v39!e-.Վ+~NJsU֣ 0vMc5%."Յ3V) Jk+d!|^K*L}c0X{=VI9 M~>_݋6k-#gؘREBK舗}*  . -e&qf,i#5ymp@s\<%V_+V{b4YPvյGfP ڼ,JX[8O<#C=#eڴ?H1VnkFR׈qo0*FJ, */L(<X?U\BmNx7+|*8%d5-;VMchz+kR$ 2m0 @™%C74g@Kx~;CXO ~P`+YRK>A>1X{c{ԣRHY7Jɇ2}dv=)'WI0GqcS%+2ybVY7.&-l2da,HӵIX%!}@&˖y62C뗦>o7yl,xh= nsd0-c`bjo-/^9B RHcjU d(@BbR.GIEh7o|fvl(ӥK {/xG*@fe:L>s- ,λ%8޳oqTҢua'As/hP? }&{BAP{aűHUIXu?jdD!p54-{.yce:G=T(n)hS3ikXFQ&ՙIf K o ϝ=0j3nC#ڞEms E؂)..6`4*0s^}ukJ 3(]R =:Ǽ~Կ0z&8E4^8-l0-ExtU&qQg 1U~+8)3HR:837n_*fέ%mž& eV50'x&Y6Lyh?nO{9$Qw{1F#A Sd&Q{-%q}@}h9)YF2.j"VUѳ[OE, Mh[VxbB'@(*Xߩ^s<>WqbbJ:n2ǒzujbHCC\Qw%Bq$J/?^rcI1q7U6~kH+X!:ϟXK4}8dX-*Cܢ^^m͍pmGe'_LYD^'BҍbKcƋ݊o"nn)]_=vBEaHF&._㒢S#)0)N8 O? *@rS4 }F!nr`(WkِO5~j|pSul276(q@l2 ՔZ: ק>kYJ5" jFvܭli|eoiO}, -]i/vЅܶ?ÊRy ”Ώ{Z/ Ze,c)҄.sЌ(1 NgYDȀ$g V݄i uNgVBQ`5zU!%10@U(TԊƟɭ/䬒9L]j̓[, zC}0 iɑJOlH =v1+Saʤ;{'פ,Sv̙wch+1][M}`8\\#;_J0V y6W9+[xE|V,d2•c4-p7c[=V+-7^Hǜ%|4U2~g8 j=*-b<~R]4R01|oیjZ]_'_0 A8غg!^^WA-iwxQ}9`_ AB7;`3޺ Y%F&.b/}L!yQ`s-/pW&>"Ffپ۪lF.=Yc`"›=BfQeDIy P!;hB0SN'TT'L3Mznc`Bvnc#Ϊh*xi}u[) R_YS&zjg!):) 83=߸M6L]zyewU.$HŽД48ca\*I7St6>z,'ſW0f6pyU0 XςxfvOҌ#\^;H7+No&fUx]2mJ_PiSKClܙ3FZ9p m$Gj`aӍ%ze 'VfkTQ$c}|!:+vI%Ao}igx"|kat=@׬`W,fjB_SDtsE,$A;[>!|u:#Ii'1=#'9`w!<>xo.4utWwtx QȾJ|KO~7 Wn+OߨN:eSkP0H(%҅l *",+xL~EwRpdQcyr\$KbI>)PhW@'c!\ kPNuL{]]DV aA!ڞYVg,}LSo 6Z}~s'}~s鴐ڿG:J>RڟCӥ61?#G_KW .Tfj6C!5^d7P+5Ec.0FŠoۑp 3B9+Vum!4 Ro%> Kͤү1>_`ۨTc6]̫TaLA$>mlP=p;R=d=O[T+^)em +&jrZ"cb0m" 3^Cz?i )a.zDK[oF7ZA^IlrmގǯY\(פ}7@ٛLY2$L4<5Q LHDg |&0ͷ(2'.6- Ze-7Vt{>RGe!STȆ'm(GTWO'{opҮz>)a~p4!Mb`囉C& ݟ5\cv8̍cԕ Ȑ5du y!kJDU)<ÁTM叒Cs($Gt'3 .wtœ& +:}s?-XT Qf!be.FԌx3>LqO=N<&K^8FӉ=yv`};OO*yi?\f)o]Tˀ\8X _Y/0Fȓ>cA OC2>nZa *y清Ψfh}Y_25۸;؎1,3ds ޮy\7 ^X̞"ȞEuѐ,!xs<V<|ESTHf"HUGtQrsʥY (SJOI,Q[zMidr4{Y7P)" xvbd{4MI0%6~@Y *z/TJ.$vh:҆zK>Q4nAI@y Ѧ0&e;`9iPν6җMboO\%z猸qp: 3l }91(")KO@bյc'/J?'H*V>c($U>i2۲ԉ<;hJ MWr+ůgM{~1 ejPFqY!?E+/9Uo!3]2`(nDE6\H_ FIJ2rEZ5~"VU"۹(* Jx1).J\;#ֿH~IL&NVԩADb|73vf+sof:"c4%8b(rldh(!zo2ӓ,.3>ܺӢ”QhnTV~jZ"TKWz#*d1w1/[ט&p1Man3wOn[ ґF3lrf~[K4Q%]^Íy( ͠6mr*W~vt!Xm93ZyڈFC& l'`1 U>"^‘aY/ga*9Sb6[g /較?7&eӘ-1R#\& _@7X+# ,ߠ݇18Jo4t,/CX@Sŭ3)?1"> nbypC1$gOix4V1'Zd.ȭKL%"$f'=Ѹ4 yT?qKi]s ȋc?姾!-)D񻀤.c1`R2F*y!^I_!T)@nt`XB_]{fJ>Ø0cOnڢtyW}cON GYpwt9i;HUK=y 1V<WvV9_m'q˷ Dg]=6я[IR+(ϟ~Wk.gǸ@4u:v :8B-&b03rQ6E;B}/J l8"u9Կ~.:Br^-y(vsx :^I`pഠ|\Ѿj/Psufw4qy-wZ4q+fcɻ.e-*^&PNk"\u/wqMGmz5YǽxǴ;Td14.;Qv3 MX6xc ޖ99*%vM:޴x[ z 9xsnGg3aTUt/iRCom^Pɢ^?\H Y<8hA[^_FԌKx9|#^#VuuU+xߤ^ saT Kg r?hj%e˓LC"r&,5()/Teߑ3aިޜL='%cT"B9ytFC$TJmM*u&D'ԅdMf" "2X;qY);'ȣTQs)has& &k+Y*JponLѣ$T \~ #l}CQ\zVT0dM63GGMtv">,he d~)zԒ`b v)8WkBv%RB> ߜqpq-`=yp7JcQ Mt_i=;m"Ȭsi$\NavZD=TOT3 / ߣu>&I)RmڌvИr !C{CijY1П0D!Hߝ|٤SG$6X ҏ_5$IHke췄Hy/%b?&G}_Ǡ~~vWXjbkj SG˜7J\ZlژNtmixRu)nLa\2!h ( H;߾U6ojpcv4^X3=DOs>-C ԀqFouI6uNõ|{p4m `GMPb"S BlOQSMV!O3КCk5T>Adf'!+(hhZЮuՇA>XWj;v䌟"VrW_{YռcDIK[P/J Ei ߐ CiRACғ5O,*ei_Py=SŖ.}>9~  Kflx HҿhXQX{J.vGm24#f!C=cՍJFe,` \uD#%Nli@ˉrgLM,6w2esQVGwi19_^iPC_+d;8YIqC䍴xNmXMD}~KrTH < [n0Wu3V |<1y0r29es'CbB) H6zl .wKF`YbW}̶՝P:v9dT퇳9;j Ӧb/jץE[~ADdeV9%y]lJ,ʂ 1\e ,P#>s&[ȋB:;_q*re"b $g&*X(w߶$WHLĔ5![UOU:n=[>rߓ'ʺx0B8kހ虞m,~ PoMrqJy5 ׵,Rlyg y|{23bƿ#ׅc9b2Wőֆk4b~k3ڮT}'MĠNS"lhW*i~ _nΈI'-FBPl 'I_>Ǜtǯ>[?|l| 32}sX9oa+L&{%ex%=b93?k_a[܃uE#L]-@alqF #V$I4>)${wRV4=q Y6&RZm{!ja ɯSvW\>Uѵ.%z`PN5іH~c{c*BY 0rޚ3 icTgE z>^Y֡&WjE0_tr򪈑,/ B{1Al78p%Pݥ \葒k̅<@DRoz.obl՝jkqQjV{ rue#yP  U3P#ŋXPNQCzUg9l9iȯ,YOIa`͉4c ;=|y'nD>O˭;qou0\g|xhx{,:A9 l}KՉ:P%V ncnZ{C|DSlXKQh:oNMڸQU)Q^1"E{*aC[m'/m_"+_ֽ4]맀=>Vi1;DI3Zݔ(z1֊ U4][7v]-x5JKgw*ܸ4"Z-nub|cg9&w'ƞfPUPNO8e0#"trAAZi0~+y,ӥ`ܭ1Qˋs0%4].W8)p,pN6]-/C'a+Q*~RK\Ll _io4k]) {ߘ3?w*ķ<5XEd?<^g+UQ.Jgc̮}QKyz&a=>69~Q"<{ofpj{vpˡ .w>0m|R=G\;9D>6z9Sc yJ=A";U m=Btc{2fp'2ek78c5dʪ˷]~;ڔ@HG5ЏfлsQ: KhMj)P\Wd]^˾,piOiuGsa?1VqʹOu$ggV h,sE:lKb'-%kSe!=>Hb* {&ӖHv~7Y $SMHUz^Z=d.^so+!\fDbUҎ~vè!6^sj Mcʞ8_Ttc/XNUcg2CJySZ ׅcl#Q:ࡎ36e-m>x&̦</jdR^D-a#Iy rrj.@K < )*7 6]&ҀĞ]a*M].*# 襞^`U+Wj,jzf9IEEx˟#DEޘ NP7=tFML_ L6Nu@zK `^[ dLQaЭQCO{Xw3+iTsD  ᆥKE|# {dZ~nr (}'NQT.vG%SPş**p^0#WF5Gg@ZVeA^c)[|cv p{Bw=1/ GANTv~i,9ө=k7$̽XT.VK,O5F]0\[@^ppɲ{LD[J|{lwIBV5BeipƼ7"L“.O'd> xs,SM7I qDh i̎?\tehZ!CP u-nN{Gȧ SPCUlee:[FiS]26-w?@ևa̿cMPц:D~ ՕBwlV*q Ŋ]+>H:Dd=)W&& W)W[,׭_1ތv;éc5!Јt{ѝ=ן]MA=5P=&[!nk{u"{n[ "ף0tS^'w0(ӆi`[ͨo%)uvq_(]C2`J+,JHuJ%y+epkFz>Ւ"++8 c@Jn%TQ}ث$ ]ZT|+h#"OnXQ1甾0&,kd4n Z?yh>+O ^1Bv]C z1ð4*<N-Y%><;ꁅF.D9ٙun)6,.6 rFܪ%2X`n/(kjӸUl#d*U[@-K+*777N /M:`I32Y.. ge ܍w%S\]n.>I--w0 W2L8r d~I#7?%|g ?U;lYӁ޸apFN_G!F_A}n35I #؜0 '0m{ڿoq 0 ,ڦ[`Hdgj[w8(;1̟9s&ـo]"|ec*o3{Psdx/n9Kn𲒟rI0CPj;"ݵ0Vj\fѳ7r􂛳uB/{y-5j^'-U:縻&(ɴ̞C`]bJkjifq7mYHD;}·K,227ZD.P`d*ft: ^s1;KB _uяet+o-`ɽk#^]?BBcaQd~7юХvW6hgwg)<ku۷E̼Wvh ,8GTZ8WZ!hEP1@0P#"XG+eX%C=GNP>|X(-Wn9$T]euC8;rIB#R#CX ȻJkFeRYtAb9}ӵi b ZEcarL(l|HE0ZrEZI׸Sp٩ä w`1N:x ~ ;ь ±Kmj =6EsJ 1DAw7oVJ#n~ քf`PaZ v4lrKh\l {Oξ=pS>y++ڥ1 ;gZR|7h1 YguMDk؇S? g(|Ie {Fz1lӜ2ݔMu99YNV ɓҍrχX>Ẹz2hN$>STq&&fao?oHuf,!: —"WW"W6ܦ)N7{ϺZtL^=<}va[ D6@hQХKfs#+1p*2i:4΁S ^,nޯeĹ_# 2& XZkFB HW\Qv/PiD ^T<`=@lS0DrtZ7`P_ŨdzbfQ=Bh~^v.}j>E̖Xݗn!zjֆ=;X7 &9>ոSjĭmbp:QP@ZZt>\li8" )2f:Es{2{eͣӄ϶/|ZYrßk+$hr,k.G]9v!B)g ~؏Ql/2uNmgn]Oa Apzf ~us Ul&O=7:I%F81Y1K@FH#`i\󤆐ڐߠz48]+f_] C)؇mjxu{|޼ o#v$}B:OIH 䧥Ᾱ:`y |]V˪!?%d&@Re D$ x+w#T<%+{zukҲ ogI M%4my{2:v0KQ_v?H Lm |>v 5dن\wsM4q%yd'Y@T(uãsqg0E93Y ]`5/Oƍ'L4 @mhլQܠzB y/{wC3A弭Gl ^kx# FƜ)h'DzTa]s* #7gŐ :L)]ďB{w,nY;LWM-K /Hbvԫyʻ-ߡn|@Xh]T\8'Yt6`ыN*vj9~IyHc"m1%\L>qUTuc !$#Zc!J;ʙn eFAߙ >wPpXofH'Vj!RxS2;~JJim XRAٿ?!Wל%S,).r 4"eזh9AӋ3|"10h <F ><4fsLSb$ڶ-OPdjvwS*\+:J˜e~{qRo|S &m#JlnWՋXB% {D[U9?mMમ&>VWwkU59tIs| Ra~ʏė}\9eχMt/]V a< Al·R,D"qV j7 у$MT9 V@i^`7pFtr$A+shww$+0qrsjat֗΃%!v6}P7I S?ȫSmWf5V8[O/~q瞑r# `<#La JQEZb?rWKb 1ڒ lzT&hAw֖/"4H_y2:mJ:^Ytig,}6}+o?Κ??E_ MƼPjcx#><*p`):D{om/ 4is՗0i'Ӈɶz.GC~ſbIR 량%<{a,$Dm:W}#TgRhb@DGGOIp!-yB_/e.)9%SDJR੦Z=[.tydCc<– ҘjV0lz GHaтЬ=P~0˚/(}dÛfmQ&`bOiSPGR]^[z|9lǐ~)B<yP'CW[8vsl4VX΃,o'8q#(؝m^vo"c@~‰iRNzj/:E)O3(,ܟd@&`YoŹ[Vpߘw˴#;c|MA` ZA`YS׃T]Qԯ7Ϊ^d uZ ur1uy_~&};DdkoxdG. HZpYJ剼.+aZ|#"n!W(|wޞPOYҾ_WKH?> .kP 2'4܈ `o8HϽXҾɲ=^Φ$}I.{fsF%L"2"al{vAY*Xs2CM=1 ߎ$z>߼CȊ)Z#C_gg„%qHg[k[5 ,oUFqoR0ⶓƒwjΆ{0`dl}M5u `a'NFWY5;IXUpPݸhTnwQ0p6#L9xNPaKVAS"稩%#jh'4[+%5OYl0v *X"Ж;ҋ^Y͕44bp}~U, d*2:(.(l9!~{10Hq(Z-m`&)=rF.mdjWHѮ4Q0|,n 6KC@=VX O/~2h|Ljz3 GΝN }DLKXꝹf$2r :m B3bE:Mc@; M4s("X>i/ Yi.6b^C ͅ| ~J3[+H%S̻ |)gqgۃ.?(( <3Ήnn+4Qy_/!|8A/srs+.ƿ5Fg2W[ǒbHnL"B[VLIo *;KN>YBdx+(׳G Ƅq^6֎iu; kCqxDnrDvZF#e>*"!= oN`+8N4Uh7js`~p-+Fx ZU?tP.+W@ Oyݒk"3t7)xΏIZseU%G/ b!;zfո"oZi)@4xc,P&T'M& Uxr,3Vkk(zc 5{>hxǃ3#%1/骭9[&׏ɰ-ɘ>d5pmw'Rɮt'2tŸ ٙ׬9M*?9pw\̌:q1B@R|a0X>̩f#ngŏa#;k[RVؠ|p%dKT]Ϝbʟ ˕q$ j2+E1v]dTZ7|[Q5f$Yi'E'RPE,W0TCcwZ= hQBu0.id8F-G+w&)yWQ>՛gH:wb[=S"]9hC"vƥBNkEfXLot;[ 7BBʨ]=Pb] Agg`Y"~aQā[k So0$lpuьb`se*EKMpl8ϱVTy1LFI/_[FL$* {fE,2(鶒DWJ5 륬ŝ_~4ʄW'.}5R/;A- iL `SƐ]D@]8-h)c9A} ׅ j$|\xhG0Jg$j<&or%#W 4+LBTV]B! hh"t[gdw;wK"3ڨ%Z{*ch" -8*ɘjQ/aXYU~zIC OloBvYԨ]zY(VފN~S(S!Z'vւKŪEA2kY$e։Rϱa_w!{W!pEG;>DY7;Z:`mBA[(Jt%Ҋcw4nʣc-;*pVIl߬۶HX-F沰䢥hsUޱL6k B/-+l+^DvuQu&#q#N&ȰJ_3~wi.Sp[IXєSpAȿtf B󽶮wAP yJh)qoimHc-]z޿!ReV{Ghy i8|g"O9x_ZՙhD̒uJ7l5!T=5V@@VežP5M-k5M&E !øc'R`tĈ PyLn-nˆb х|V/. Udrk[UEKS_㰢JHh-& WZe)@ ;~#5ޗOg~yTMGLL1D{w8O J孈eGIl5 4tR$:D'zZ^dz]^271{ XY+eLQ2iֆ* -Y y S+EcV?VmT"uISZ bSںu–K-4CB.Lc•7M*d>%$q8>E,=v- 8` ",|,ߦp6H~wv[%Nʈ1-Ǔ~W ݦ ] V Ad?[Mxf4"NHT$~H3C{/ ~"Ki)x@\S|ڙ(sV\lXHrԶߢg{t.`E:Gw!4FXMi.ϭUf PJνS?O:t1y6D%k4Iz50b#`YBv6Q?V,t4_Xߵ:RjtٿaDV6wS2!n+w^R Qz2HVI31dofzʷ&1D3{z;QtvGמ "}yMj>R:Io 1{ܭ3b/ա#DWAs>N̰q~ RpoN%T0e/T' GypL2 SOr-S!!mwFlHMCaN}88]`ܣ|# ,j(})vY{}'9TyR#Ŷk$T3:+؏C7UL)pn0 5 hݣxJ/akOz* {.E0aާq^>€VRIqGq54ɾ_Ӧ9HHMa>{v^)(@f;0uF|=objnONi^zқi1kKtm^=eSdg⭖h(%f%xj6%n}[jA =WdžS{3IJxWOYtEwn tTEúI}'JtOs9ѡk_L6E"sgoAu)3bL7SLR%[[[Q7KUƏiV r†1E+P K)/#)-ZڡHm4>LU(5zÐȣs(kEޖAbtb8):Jm?uN갖U(*qx@aL$ᯩͨG^͚t9e on{=mׯM@oab -o7mZQ6fU%ǐ !z,[(St2yKt`Lx4VXXDPqv;n 0MDם@w%6oGyS BҨX '&VrnAB5b yAש+JejFE r3ip CS3to ߠ`Jˬj:9|j;/n  zz#8]p4c%;-](h~ ~sE9hp$!VvqK_"MXXF:IJoSܡ])ӀEb0g}Jبԉ ;ܢi-E8bo0? JKX~wQ4LD ۃo(-Tp@7 ďyda99{OȪy+>@PZX cTO3r"fQ~P~('S[13y5`Q?&GJڰ0=eG?gDW'e11죅M@OtQ!`O1}0 A^h5+X1;֭xc5&N8 1kI 6k෈p[Gڜa1JT*?58VK]$D'5Oc0ѱQ CDyv8$ju1%Im]AاX!soL#vCm;7MgPV5Af* nPyoq ᾚC2;Gl6xo "I0; ѧyu_|/դټNA*Q\(f3Cs?P+(k}왒8dY豰9Kl#UE $m7<p-τ%s[T *?%Jψby\^=?/.J!ZQ,b`2oF`3W gi>}n;.μCvg !pe &~b0ƧC8͕)WebL/fܴ=;XAm!}' eLqhj-^!N@azq/_”i3t,NL(z޻B~MQHfج:@& vxTJC<w,\YѼe^a'>ãz)oF7,1Qh]#Vˊ귥}7>H"_(`v~vfҸ'!- gtgABn5TUf+Q2Kr3-/:t5aFj*u!*QȇgrŽ,'lWpG/j'SJ]EsI>ٳk0fe94v] G Y0M,<TѩY>!g?X *U#\,q8mSE_rj꽢Zm͍*9MiTyfBi7|tgd u.fΒdedj)[GL:#mFVGD_Ǫ%Wjl 5! Q &hWF) bWz/[hq)O,\[EDq}s/[etQjXg=yŚ5U١̈}@Mom}{oE.'=&c9Aܹy9/F |fߤ eP[\69Pe94gk":J)n٬{-KbB;HlNu 2U*aO*aIŎwAuF:(]vMςM |FũD N~hr 눾Բ@at T[FT7;qqIF.Z"XQM\L'.m]㻡RPա/Y ~- ]gێXߪ%Dq(_֜|YچgwBfՠ2Ԣhvnd b&>ϱWw:FdFwpV7 )KB ol* /T"]Dz 7/>? G-8&}.{ Pm̴7Mz.(nF`'G Ҭ*ߋ"o v$ݠ/uu%B'-aMhbGANhuOUTƨ'3HpFSzM[DD60uNck]$Rz?v DR'5 vA{sŅsSY5bWhހXꕘĠ,~Oם+J@xprJO^{m;)no5jd C>KJP=SD)WLg7Xŧ{[ }A^k+$P7Т/8{} {RUZ;7l*M(oҀl?]M7LH)fɑQ,TҀI d3V;6@ n"Bk26uv]mIb)Y2"k̈~PE=+vUNo]% MZ$+U8SB(&qs(_[Ϡ1DbJP6R%{#7rX.)d =M0;Ki)0ROmR9 m}ܖ+*~4SAta%8?ʓ[ZϨ,.X_=t 4iy_+TzcfVY TPYE5b 2wBeRoSkga#ԀڝA)<cf)1Yp_%w]}XbEd#~BXo|dtAOU*?dmr$~Sk&Pd2pP4PvJp)s! GSJ4B8n m+/`I ȣPO ^-a5x1@)R%ȢBYi$bi9xHz|&CoMm4WT5-yW!LKFCͥϐYΖ7}//(.ui&=1 d0 ˝Z" ڍsFT_S﹢ZЙIN <tPD{2J %Vqׯ]} yiWJ wuT@oDŽe,/b7m#[Ok1~P&)յߧ^p85"]l \Fxd`6qØEh9TjCH6iƸ+Wk5I[Re p3mFM+d-"vZd/ʣ0~|x;=0Q%(m|YQ?jE&k:c+TElv"C@ȇ9G W+b׽nE]?J{,Boܢx؛qw1W%_WoÉ< U~dgܗYb``}Z ϡ#'d-fIz\pu%°ӥ7~[6f#*-oP5`Qԛ_h҃m+F1rlg1h/cb?'׵54UyMNN]fFj#SZdIvmOMoX:Miö8pBQfYXl|cZ+80.o|y׹b1񕈕jIp9bVtp\M+}_ċ23PCr|wO־ݧ-m%/Rmwpkj_X55:eMZ^v[,sE^AK0Q&{A>exH\7`_n:G _(*ض_Pg}CFK^U@EeUqQ=Y@`Ls[7\{ '\8:'CE#}/L(/d϶MzO>u1֎ ջb=|肞ǮS;:#P)v[P>S><mG(ɏJR"Z{F)KCu~~Qjf\_^xc]^s[ i6(zlpcg ; alnR$Ȃ0m2ʹifDa*%Up݀O~F`>Yi'שiS5[.Wz*H(Ӄo!)}x [ҌAb;nF/a !B?+.s-F*9H(1uݠ>OOd]g.$gQ8 ]㲻?qf·, N'rm/ k+CK|V%GF@Wݪ:ݗV3=5P5+,߃Τ&J'@@,Q#cXX)3-u^wgu`y~;fb(.YpTg%'hzX8Ra]EB;򒿰Y#|bSm9yֽbCKߖ^Gfa|Aa)\W^W9AB֗Y/V{!϶EkKbm1OzX֍ w"Nm.d:LѢHU Q]%'8vO_ @c6ƫn-.n(f} w6E ͷoyޔ=\TmYBV e|.k6e;oeGn99aT-hYFԌ2[0bYNPK9>FG*R@;%6%9 ,f%vef贊fb4qZ_{0w)C,Ύ}ɾ 6ne;55]rЖQN좭|hfà z\dohZۘ7 W2ӑ@lDVtjZj:ZB7HGcة9%qiX_6FXկ^hy(~~U7Ljw2yb\9R@{aՅ%R x e µ?j$EZoP*2 z^s_h=6}`>kdRpy8 9ͱBqZ-O>ZF^9Z9Mh dGd3SFzy8~4)M*qIhmIɥ$u$PxY-GB,D~ѹVQByR%L 4rBM $LHdU6! F iR4s V WݼEͦ1w-_-t_kb.,,Gh@U&UzP:@\q`'\ TrHJi߽!D)biBE+M̿t+k;[w;HC7xy.1}JΩqvy[;bh77u%j+wۊ2/^m 珆`%1!anDpeo W 6#kn?FZD ևLsŹ*I6ƴa&P8V_+v Kt=bo*hn+$Kl=OS siA~C_0Hz|FlbT>I5_SuIE% rv׮Bxk4 w,ϦET}>ivy)XruwA߀x Gl,%XZ]r;QD4@2ZDavrv6ڮm\69:<'Ik Z VV$ļMXsxoN!XՊR&Ipą'TzL+¹ܙmn"F&LnY7cժZ+(8!u#TvZl}$ygỏ=2VIrTZЍܗ- 25ΣWrei/>,[Doh)5jJ::ZSǞl~Fυ8,偟<IZN\=:n qz zH-ȳ᱉̌R&\~\c[FkE8xxTV_Ƕpb `FFĂ3bYħm$; X1d U-T+2 䎗_A,1O>?BXynH]ZQ&KWݙva! ѩ52Qִ|TrJXZ4C`wT0iV-;*zZ⚞V~9+TD7 BĸnKK&,}ܓ`fK.53SBoC/Imc@ jVaas|.u PtQm|N+Z5gF{uH5נEQ-"`c9h?ukvG<`ɮ@ NY qj4ޭ| tkt3[R Wʣsy | g~ 3%0`3>J3b'bIJIo|X9/6;ַy߶tM%{GcxW.Q)ZVxol>Ќ&GLD%WMT s\!?޳QZjbH_r DC*;g|p>fיُW|1I~kȚ5ey\~:z}qhEE%TijPkܝ5l_LHo k<ռbԢ[$at^͸.nlkD;AE&Jj! dz1</7oַY]G!m?А|<:m%u%m ]Mڤӧ!E%c>;HR3SŰ0&Ž]êJmQ>$1<.pw牄9T,_>]HwR5(޳i=҉u~_ۏW=㘕u^~ I"WAT^'|a |CnOE'XbuGV.ED˔xSqlɶhhRǃa51woa.ZG2 <4C_܉G uLn6}՛cn:$2ɂ6;L[s&U9[}΃,z ?P=GDd+u~/_\}ψ; cjB6]q!JXj+1ݙ+uCP_3XEsɩ]{9EP90.07Xv*ק-:R-w(5 |mpsh<9=Z{+xTmmHS7U~H^trA?(–C|!D* GUp$7% J,[x 7O[]e۴ } mrԁV9?3 ' 0ٕgv(Μvj֙Wk5AN_^Sɔ{K*[:({WZB=JKN[)K $I1~jeV 4Q9X@*gzӰH26FxI( A-&*AB&Fe\VQms=n@#PZqF|&ѤNX`yNϮ@ƗY+A=ox|ºω5Wr''-b–6v4=3z^Ж/MXkUCelZAdN$ rQD褻hڻ$2lP ~-W{< Cl&h9t0V@?ȟgV*cI(ϻ%abu'#Ix@/&۳,UkK &?ACՎzBHPi}P@20Zj6W1Է+bwE<(ŽѤX#~}qm&!b,̺ie_vyRujH!$K܆> p;Wpo: 54tyjO٠T]2݁>oPW!d`ô>Zks v`<@VVgb4_{1j)#&VԕB䲁&X͙Z4X`O >#0o]:hWv r9U3AЦaTaqUC֗c6;ShJGs`D,VQ+H#cP" vЊN|@oM<*F1m*;_1pA?? Jc}VԫdA y4N>Y3hn + ΐv$9˂-{2v0==lzzpSI y, 9[UXbS۸1JnXrrE刾u7^@^GP]"2fB~緟KL`!l߰ɀJ?+$mH j/iA  "qso&%LKd +t ;YvQ$$ۗ>٧BC1ѩXг2c%I)!Ya'$ jjtϱ(c`04qa%(`V.}{ KKN]i A=kяuO5pϪ0CN ҒnR x]ξj'oھ'0!O1, qP&G`[;>#||<2^dyb|@ ]:*ƀ$Ctje9C8F;yЖS }#I62g{17PjVV#9j9I X4U|$gr=@\Eu{LD-i-قAKo(mQ6A"rJtt586o8 Y$S#2̃vv9){(%g">Ƅш^ZIiB1N|n\PMI%iSR95 -JSkdS=G{<@$7Åxhd>xZL6@-Aٚ(l1"&kcz{V2PO&.MAG'¾^@'P}_w,cL? Yf)ΩgRk4>zxb,SAˎegGlq'C>zKxC*8hdt!MDA~LG~Mx5.4{qQ4i }3BaPZ֘V5ג1Duƫc>FȊؾ_=pp86b-k32?,tLJY۬<(pݿIQ6=9D]07q0ǓS݇3?~혆[ H E/V+m~BFuE@(kPjRmyҨmı)NahArD*8B.gǁ]N +[MH^exu󑍰 c5kфX>E?)'7[,020Ns.}>`ϙ@(Mïwʽp%#{idpU4QX9&3lާmAx?f%fّb V T$UP!o`l-i:CQg֩2+5f"D2(jtO]G>FI(r^H:/ ;=rOQ"_5i 1c<3 sLDVʺg֦,]B$O :#e*kԬ#7o\hga̼/qxW:6fEέِoޝa`(ZCO;L3(y}dL\pt\+r@¦# qpV K^IkAe\r{e%9F6„oODŸm2eօ^}KDQNIM=ʮejuZ:h:r"X~Rla#@a1".$ۀhI9RٗMpdyEW({O[/?}dkh88u:7l3&JRyfI;>R߅j@9e n/1KtRAlx7^oS5^EQȢ vu9.5zZ;('A5!o30K“3g}2}[-J쨁( Оnk9nqnuMа3&M4 _@^ fˡR墒SGC5q4(w<`v [5^T9|E>Lx8oa<)aC l "8P":U:hG#$6i㰸 R&̔FΆ@l^?%,:y?'}+Oi"q *%>+I(>vS W )p]ӡ0jg<znﵤS3vܼ8FBnYXw& w:Tc%1MO~ ά[@B0u Nu.t!;g랝Z#OBlm=pef6+\x9^|yNJK\흔]~M"3vWDR wfooq!_H3 zYTSW)!(/iF'On[Cf!5 yk˸R{e `#RйyK ._R _]a@O3oȿ}9 yoπ0^[z8XLm<0DV4#͖$-/#:1P;AyGP`fN 0v{Пv32.B~j~^}deৣVQi[ۭ0xҊnޅ3ьw яJlhd^P)PP{>y"Xu|S֭uo^FX(/* ۧ;reBD݆;w}1!Q]kԽq #y9>X#-u?WH*K|K6Ō}D`{+ס2έFGցD!,3 &voGi5.D,@N\:`mg&}Z7pvw(EeHSgIZ*TyyɝP&$$$׵C9LU3WJok@NGs~k>.:^:Lnl|rJ䦊hrv  N#'Wg FvQDE7.0b7Ht<~ڠF} -UokCCE-/M!F-`ǽUP X93’PetDفzڏq7,h!p]X(zȤ0Dyy--Q7 ~6(ȳ~}幝&d,Xml4 K%@D88U)kq `5Xd<%AwzbNS8CXe cp.?ݐ#U vM-ڃ5m QS&P=866;mЍ"Ά"~$Byk)R>LiEZLGrF"C@?dLM1c!D%zx;V@ 0gaRƦfYϛΡBD o"~T]ULC5 & aYm"_@I^<[!#~R&,;LaNjL1#h!'?" 6`M(([TFYS$>ai K:ZE(>ER$UFPVi4hQouhoetwR(,#Yވ#Y,˧^:Le-|(XzI}Y̙t3|rÜl$SQ&JZ"6<el X]_}d L1r1@}j*C,Ȁ&ur=hRL!YҳIYwlUB;8YB.2SObaOظ!W(DXiONS_CǛBKf)f;d:CS ~)7yf&hU6+^^*s)WpƖ|#}1+7 ͇3Kanh{;7g쫖Nfyv7BWd^s2ђj2lzK2Y6oUK5}QFntwqoB57vxq-26E/v(\^>ۤ"GW6ٛx, dxoA9E#bMd,r ySC,Ew!:ѐTKshxP̍YmYF^5(`(bэ^-V9pY!T˾Bdґ2KОSvM K=Y#D~BUyqG E1 ک[ !E06/ } c E>F|6Fz|sR)uh聼a@)ĴC&U4ä *QTWMT ޚq&O@Cs0sK*/4e*ch˴ϘT=kRe23v2/ksw-.}~ uCO${V:,MlC?^d1[H֬(蝓)=4z_4~:!=:҆e5/.r&+z j`RPǺnhA8zX8CӋJ[0+9caf4 O.X-,*9~΢@XOXrh8R~;Mo:+"[ ,IHezr֜]}0BjRkiX6oe~W9 "Ge=ČKaўΝئlee0+潩Tn3!Ѝ'WV.(J.ITيoUj4!_s qD8> dI9pnЊq#Fz=c>J\Ty౉UBL ?&3g:)u\CGfk-;FVmN瓫danN͟y 9&|1OeJ5*LID`}ZzM8y#@on31_H-|J=~ߴ0畫=fx#tĚ ,|3?rtF}mlJ|R!7FHe}:cV%lCfY5=NAQ{K47z~=\BIl1ZO,墶WognȂҒ++r-]5d7uqy NtSI,ep"Q#"سy6a/1X@ ' h#ؓo4kҸ1xE۞p} kX%iL(ln4MPiK]ϧk7(ͣKێs~hn!PYIx{ M)lfD srOFk^S+O=im?%йT6 Mn?8b5*y7+fy)r %ܾrjLEDb@t*&H|{znwR;bKdJ41||X4.<(Aq6!+ qMnN .߈Ϗv0??wx@RoS|+ZLj 5NK{3C[(~0=#فqCD.Q̜7ĵ^#em u~w1d;2Ӓ`m"%Fɻeug:vHi瞗$A9c$v.:Q" vW g% wEZZy7$96k 6D꧉ 8}e<[+Xr= I](XPِ֡WIZA-?b^@gnpo\*Ûq8n7ŭQ z(nkK>|֋m m ?0O x{o7Hs1g]( 67c;I!وiT8B{U.PȬ"ўnv!O]rALoGS`c>W[z1Zmn!$ռ6qo# p$ ߪ f F fXխYF)E~ OCS= [|`Mg&d,ȕRv&:ÈKI "24}~U4!F\W 7).=3/azwj\t/~XځVS誕O 3Qh{RQa_5(fB]>;A9j3t &GqQvw#VAAu뱅Fiirll*wO,`PeBB&cͦ!SL@Nv98դAݠ-d]ƗO+T{v,=Z)1?ي S&VX Zx}&<-,)`I mRɈ/a40U{b> Z9ȭ|"k,KУa@S\+r(X֫o#x8R{/AAʷmľ _Eu) # ՛/EcR+{MVVw3|^̟YzڔwBy:o#F;΢Զ8, sݘ^n]yD\y(ERS&xKD8ns>c lKj$.z9pSHGǃ.71P½cQxo4 4!b9kϬ{Y)n<+*sH0%ZGCQc޽ .}PHqH̝/p,s'1XqN__y4P-ѫHKha1Vs #b/n@q {# v;]X|\X[APӱ 'rV%SLMIZAp^;T5+hfFc>Ml7 q fOTK~~n' ~N )G&mL4uk?)A<82:`5aӴ2Gf/GYšۈ|K/iUnqOgE#k8 "~K`ZU(DSC,X rxDn^Tz \]l|fb 6^I;Q]t%OhLyJkDذj{PInהuLLTyj`Ȍ ,`l1xG4?kr8eh/`J{*gpYX\wNe!o-7KVXMBMҞx d9o4j}q.P#UYkL: @meK Gv!E,P<9»e.3<]NstK80rCrnd6 ]IL;p(מŹlPG$5iM %r9 )Q#T;h؏0NÎ6P7= ? (a@u*8a1CC ZVwxR%Y#Cy~*jo_'Fsg)_L15zwl{ՁV+-S#U߼3Wg, wu}NWxRd:}wRX2r Z> JFˌbjפڮehÝD%4E`}` ƙܠ|~?͌sAjmH626野 3Ml T]ǐ> hjShD=R%mEtq}`8̚(\l:iYXΪ>)8wdk7qZd."F_d.ᛰ5M{Wd)9(507 E^'͂E*L/.i6lj;1 z/:w#1 T*JrV,Xf츭_5HGe߲=@0 Sޗt.x@V=hAt[;X; Ub=oyg&0%07cG|:=^^! żB Twcjr* g̍?G28q)LJ1#&cLwzzPbDV=&ziƖGr8YI<)jm޻@{=DkX f{)@Dx/pwK:ޏkڪdتΒLCsbT>4O2ߟr# ew> AQdklʫ I"K$<~DЙ^€~ "$!%yV쳋ƤF;&Q7 s r_U8! i紃P``3FV ZlΪS@m$s 8 T}Ч EtaI P–ֿ{'E!w*8c< Bf;k-glL%ZT &i'Έ`,(K22ʇrTmg?%]؏iP >5;B:bc8p^ a} sƇ{c׌P Pd) eQn,r -׻rMCQoB:Y Cc`qv+z40H0o= C[@/&E5㏆ٓBSxQ-< BIܮK~Ff;k{@M,9Wo.c̚3$r*!̭i2jp؆Q W%z1)>4FF^Hw]<'ϜNI.)^&ģmΑSLKcČ t*!=qj^[ 't-cY Nt~:;R쫎RՉ 1|2@6f%FJ`[O,ڱ"~|WV9?E e 9:ו7+YDW1&:@n[~V[Ȼ+B`0`kɏ&.m'4t,5d(!]?܅!\)1i?dǮ(J2,L.V#HƮ!oFp >K,ļcU bsU2hfFe%D/j6}.P@ʰrryk)aѧ@\26h*^JU JA& rrSMVMH19BsR#'-$ۭ'yA@Q"v[9,~Q&Ң&ВU ~veF ֥Al?yW 'Z) b}}u/ [YJp8|1^샪%'A޿ +6ŽvNuW1QUgp^12|3m>U>Հˮ bsßŀE:U 2Z LnD 6m<*(cSDv8qC)yHۃA!ثM%֠edJjuLbWw<-g" T5P'?+gE}t–> :1k8yUzgKN(6r,bFv>2=&ZkwK"pZST#jå@`|}߂*OPN7! 9\ԡ0tf/TTl|7ܱZ2`I=XFj᦭z_-|x*ʭFlDx۪H~. V a +|!Ǣ̜Z5k٧AG(0)̢{Dj9iPY;Zg3$d}Ǿxs.q<~J2NM ~:*bڊ˔@W 7„F+?Dk#a‹43Te,V.Ҿ=L} l<[|M0M;HIҎ\) =t@8ł\qq<8 _wPY"^fvܩdǫ0;m읝tm< Ȧocbf'FڶDp,khq '+dM dBzɼC̭݈qLPn-[qiFHq; +J Cg-@P :wAg\ewpn.:ܰ@wqNZRĉƫ{1 ыŰwkx`qi@yKxë {YF@p&&Lj{ eTԆ_D'!DpߗwciLŠx1./<|G/K*6'LQRXwkRJT|{HTQu` ="ѢkG"s#'&"ڣԪL;,9>Ũt¨T? 73.tmOUj6gczx<5iyqP uі2[”GXz3 v,Dc\s4I&Cqm5b׆]x("5:RSYt~PtQ~șIG*NPP{CL5󒘛 ]%앾ajbS(d1H,.`q}$إ>5!jPkIœ8ckyH?Sq=` ] O⦁ W HD>;@e_.pXc Ru uXd&U\Ure̚% P!IA#;ؼE.<[)j3ꮵAEof(~9{& p9S OzeF-|;Ҧ,&phR5}Lfl;m\lp2c[@ Pe=N#t4f#X)u?B\Ӄm< 6}iޜdS 3洳653ɰDC/<0O&R}kvX: iL}믈xen'nx1 Egh.!6 ߿EDN <&%?l};Ue AͶg 2?򩿝&T A4'x$I?뒶셁s[A*̜l %Mv!S*^.b}.b̆޺.×e V72H CH%E ߴĜ"x$QkMeȾЊ,RIOgz_v|یѲFùz3D_`[LZ. ӒGhSZ797.}p4/Y*&5U|PGpAsJ g w<A~ѮPOD tFː*ۚLj5kl|}KȆsNꤎ-\R$v4ųa1)^A<7v8h(p  F{BP wn`*tz ĭNT@ԉUSq^ʝU0hxY+.+ɞ**䣥DrnNj oj|R-\NJ]WVuY)H: u1!YRJsy$+}h$PBСX "Nw篓10}j֡s⮖FYO2ZP 8#,3u^FbScZr]^Q{v7,*l_b%6grW^s't1!\BnD Bb-?Ʌb,0< Ko =j b8q~)tE3՝tfz(0x^xOP:mxTDnU|ɒ_"{jؼf鮲k|5;)pAqx5<"yQMRNfcxbydFbC wbB|1Mȴz*r=GqBN]ܣf[H~K\m"U(5ƺTZQT*woB1paHRYsy'(\ΫljiD#hjHgP.VDW.O>KW -OwJs3r؏֧&W| j+WNx&=? i dv6{d_A$2bjQQc45 ]&IF< 2w_!!4.M[(%34Hj,=s2by׃nX<pF ߊ(I5qLCΜ2ą$ě-yuk̥ۮ k5@x՝_4ra e` ,dYjh{uo<+ʎm)Q~cRVXiJ4kg8\S%^e9[\ R <B*0*GLOVg$u9Y$[ T{% nm1%dmSqO;+Hǎ)\ 0 5gX[)luRLc[68DЏaqQXp}<Rąg`a OsOs;Jd6|7@z7"VB_ 8ݡXCZDٰah ,ëP9W8:8-'Z^5!A`x ['[JV[USު;H󀰪3&owt>t&K̑7:}[[դEeN/6jٞEAYM5(.لG~rlot\3}֋}OUFf A!42JVs ~Rj_*ZE07 t@瀩q߰щRS%iJ^IJi @"z64 ,Sv +Z|#=6Z5;1[I*4ΈJ{" o@KCY6J:y~'I :W ?-;<}]rmow]lV̘CG_P6hn oP*/v>:ọ)T7w^lt Ι06%IjQQ*'SjyX},3PB.Iq 'jMQSzxI]zBa1jUQm2\L#Iu3BoG AKiܥ!Rڀ NL G@9pF1nd fѧEAlpK̪ѧGO2`.کv?BQ9vRҌЪd Kq.jŢf~aGgA _H4g,sμ0i_Qs3Uehӝ+e6) "-膖H2s&$*I7坲iWA2} XDtky~t\S78A$ H@sAk …{AafGiʔdzA.%"| UtX̤@{qf?I|a^z&:E ( ynݛXnNh\ڪrE1?S#t4s$3?PHa)oyVPdnbО_r#|e/#fɒðoyz<v(Fs'~d{[I"8} yRR}*h}ï9q=ggQ+)8YBowia}M}nOr?/#8 p㖜`Slc a[mJWi:Bf)7Y:F^^XɳF wK"vqn pl#1xSy / 9wϖ) #<';j"se!ڬx=MGxx7LjPL"S-L]lMU|ғpu~԰,MMlnx;n#C Rh^,|{Di`p+>nN0sYbNs/u"D-W[';p`<%wx6k4тMʸ(ni_P ʃXjr鮒bO 4kx& ؊<)iG6޴!R-r-h+\uKc.zqt\eGˤ,@T`5 @G,je P_}U5gh^Z2Z8SDݹ[VI̴L@UBަJ8i[}`+hr]1QW,ֳ9r̪+C}^eUEX6WKeVGVxtj󤉱t)7Q! {m.5":k8E $4UD  Uik?|VZ zCϏ&\ O "0e3oj*΃l0tyPHy.tqHFY}1:-%QCl9DUP8'e?tR8`󽲎t T\9|9+ZJ#Z~r޹L Jok.,ki bMd'BX7BʢIlߝo}= r4"짽O ![L#]a"0UUK?⢝N{G)[ XD]cMy'߱uzjb|8Ekq!9@)> %NyO4xu :Y.\-JsaeUb^PRnƟ9xgbSdJ݅1prg C7W@c,|vJVx sMEeWi$*z Im*GHpܼ4m}3A-HuB\@2a0VMd6eoIWAytz5#a'7]c\}xe@XHϻYd"J(Bf]nlLWW`>>x²V+~7)8b_%J,}cӦӸ OB0MLdǝf08sv'M!ӝ|aR*ýK3s{qsT>^#Y#=;‡9픢W9zsDhhR LHUQdљi lv~m]'zBKJlÐB bpf":d̈́HnGN% meW,Xc:}&uzt0uBA@JR'śW@+S#<+|/.?guviSGt^ Y@2t 1)]WP%yɛmn <*"\nQaw}.1CޗyF5xdsI"ԜҐK}l<bO!aB*hId\Kxbg~ +x+)/nL&<؎S!J$n7%jT6D;>7*J|s7?&fY$͂)7p i=P"X6Z(gbZAލw tN IFُ+ lV5((zuB'eJ,e RjO_wl@~}; |JuSDJg'({P Z7/tF웂{ok´ju ]=|yjGRb@𷺥 +( H0̷.=ج$αI ESkB6#X$$p,J XNjM ʎ7>! K۴1NjLnbs6)6ےR#߂޶+ZN,%׍#]ţQD/q2?sFw@ؔ*#eJZ aH)d++bIūRKX:fG(#ԑ%t@ڸ"9/m} ;h1͜?LX۞egş!<Փ$u]uϡ\M}ভ_(;1k>Dc*g6;8\n RjX㢾~ @Ո?8쫛!u6_R`w+Ì\xKȽ7l";jVUk'FD,H!Np2Xg iVxoGЭ}IJ1>JE4^O%'eRZ;gc͙G3ߚ->BJcPpf˿R)bSfʊ}Us-?l{)t5g`P9'<`K<HBMMї;\RwoJoEcũyeIء[:P\ mji? T0.k G@ە{ΑRQa[*Q!h9&4Q j< = \ڟTQ֒ADsaM;78M$B+C+9 zo,nsh`[U1:l<{"ݥRJDIf?[t,l;$DG!%pzJ۷# /[|n$zǝ+i_SrY֖M c)r"+\s*x ʯ\CͿP /c fo"j'/n,ؤ ŝp#קVt{᦭@kXlvG̈́Q&YUr.nB4*v{;3U_Ą9{7[mt1.{{wFkۚ* GI#@>312%茕y;64  A|s4μ`oZ {U@N8. #vRe~ iW9)>%ƈc7 k0nYg ΤrJ'.pܠLD<|њmaJD JLcC*x6TWx|kFQ]ؿ/]A%=&:DJ%wT @:a9}G\_pKZtǶ!$`Տ n!z?~dR6Q.6ϛ;T BtNS8sTH+:Bwx9^EA#;TzDN}2sa '}JcLybS(2M1AzYs%fv.c}(Ц9(vWƌfb# 'íD>L_5? Xuѹ*P@F#X5pP /1ѓSz'Tw13~[p]QI޹))=?"Cc>&g.@qqnÙ7[E~m%QP~N {̓ taT+e_ }a\n@5S~ G;Е@̣fdaѸDPrT[!H>zݏ|IZ`4Z-nHٽLWr,P%/ W<}ßscS&cezG2?YQ'[tVߓyQVi$o&TTqOU9YqrVFfMMK"UJ+.ѻmzl6ݘӽ3K=CLi'cLp]ZĨ-?`i ܨ癦R,j۲;MTrӽK[=*fؐq`2QdDu'SeaR|2+ko:K\\.}y#/4.wK*4,G. af XM_LPéWȏ넀w 6~<-)(M#}#!1-IX.BǧYa\Ɯl_F'ԱF>DD8 Z_>CSXUPR kv~BOd' <31`)r>pP$ٗR D_^dy5e&K^16 :"%2ke"_Q?l]hȅХ?*HޛXJˡ &|K=h3fWvA9G8a?|Ipjw͘Jی6k]o9W) ,ӆnbr )ӿ:|PTA~.gu1Lj}Ay=vJ䟪@Xk璓}Thh P7o\Z ;^W^8jţڻE0ި0+5~]?H]pnHFaR/BUod;i% wd _4QfՋ_!/_MMM hTq*;7f.ZoPv9ϼ|ӱ+qY; &f;lp[W2ѱpwA[j:{ x:>tfP ';fZؕ91e'p'Vys8hSR(ij;5 ;Bl~\#;d23epLן7zAkX'yd] %i8Kr s|1&gGtdas7v { j 䃜Y:nr{g=`b2O'xWR }閩.訿XXǽ('n˘ZNhwEa c.au+2Hв@!qnjԘϝJj<~m2~ҠJOGWs: d|HTӜ9q֩O/`Dj nx1%j#'vxnTxV EsJnM[HWiyGwìƶ[=~mŦ8?x,JQ@L]?No|6)G}.XP^O'(YJh&>7K3C#`jY;qߩ3&j:=<3e1l2U(çLڻuv m͚`+2JQOZӳ1D[_(brmzbSiRҺ J51fsm'"k$Fv]>;ݘ>5`* oxd gVm; pnC6f/p;г>*G$bʖJ3*A=c] 5|'gN΀ue ;FYE#ݴwcv ~"WxeY<܅ޯi)̱tu,BBfh^(No#q1|͞ J&@ՍipJ35T2(/xDϙ|5:W ڈ ֺe'cϬ,Sל$8?헄#Թ"y#hv/^5U8سӂqRoxiC/R a# Z MUѫLo´+NZ}9@'Bk%~2V"|v(\°M"LVS\fu'oMe>\Q1o?Jm^[6A`4|nHF@<~r>l`T藸P-By5Z/3GXAK/gӌjKmCW 0QA΃b|V}띟P:U4q}ͻ7Q ǖNzj3;_@OV(:eQĞW@Eiߟg<k~hXCԬ>_LaoyW6 4m.i_LAdg{K-= A$uMtW:B`tsw v /#iS y+%`z m*&dKd:>[_umU}<\#iR+{JX</O`c4 mNM=yuʤsyTE9ԭxtU/C͈+7 -W98\Zˮ|@WfVไW@};YL\ڙP ;ym۸Mxr &e'S\*-i9-v˓GVz:[8Uzfݸ.!| 5ڝPvk> TYLIŻ9I.qn`3hM]vg0a7ܐp}fo7Fh 9$ߦىila K`Fv˜M/#E{*iJ^DʎA^HM7⇗?uv˝;ƅM@i@dd[X'O9n=3{m7~ wI,ud( ReX7Tzʮ0/5A6s>_2b8cՅ Ûqꡩ$v (qȜdG4#8шWнh)|4u4MڅʮU Z0nB9C֡-}ܩ72hE@1JPtŲk&ԅ%cErhKg )?1H}֤{|,s~;m`[Wb~@oGf] n]c Ⓓ!]zkh;uR3AGtFM`M^n.Rˡgfz%Z6x!l"\LB/lnT|. Y`z؋,jP J6.[cdS'̤w{%2=tR}n+'r[c/@ I'VgUZZ)-9z+n!lJA®{t,*%|uu: m>裯&J_  CF >`DhCiXݖЁ Nf/aګ>0eW|G.} XF P!Z2aAM YEbxn^I^A b?hVᠡ)SZCV_F˴ގ95=vo#^u,)=ln֜!1Bc^UuZ.Wyzy~X\0272ӃDhKaJv)uΞƀb ?8&^J!Cb,oF\ tV6-/Α ߏq<3(iޜKj!ycEk݋(Kح~.E}ԉ| 1}47vƒ NTCVߘtR/@fƒj$7: 85 NUGtd^ "K˜#5BpuwÃ!EPz"r;64z5? \[Q [cMg 7Ez ٽS:m`p< 6ozQܒJY]&+AOOW\J$Ɨppsrx~bj-=qUA=hKcZ۾#vrØ@`>+ӼCj96f UEWӦ{ux7Si4pc\>L$PwF8'{[[NyپL1$qujj[MXV^EmL;(I=*]uvp *4g&E@1\O]Woc3Fzy޿2ɑ[{I3U[%,5ІVF<  #(y?e0:eToS:2ԺgvӃO)}0UFpyN1Kfv.WK#D1%ȅ~s;5PL p.1{Vt}zLiIVJ\@)NEZ!h E~hPaP]KU13bO:#5#yǙ@-^I%]l:V엤tjnZǜ9fGc7'^_0=zDMf}'mR뤸KHʕb.tFs%j{pCz => #Egg{DU@Ck[%NE3(7lwDy%+D(er:N :+v{`\ kt!zCU] a |Y7MEu=!$=1{JmaeG.]=c=fOuY(h6a"uOS#Eӿ+,~O _|e+fM~Wwwy~v?o5]f?}ġ}HCָޠw1g:d +B0*zT~ N,(I$3/*цcw{JDᚴCH:<"m[ܮ/jagw?}zVDz y-]N͹gO2ڦdcQN%ޛx;^G ۵K@;j:z\ܰV2ɣZzdO)IA &a:8x̭MnrP2cR>;]eb=;X"L/Gد/:vGp5%梄5v=)Xw7!"V <{C?dƵ=Ƃ~nn\MO!>CϖU"7WPFYQP#YFs/ͼxXr{S*aj!=54LfD܍RDk(H( |ظvYa9jR,~$ld $@Wh5g p8rOՑxM"Is'϶>txU:*U:w3ՏdJ'-~d쪋ye]gghKĒ?B{a@j"ǷX_$84XJTzn56aE)IېqD;Jf⿯ޡ? 6IaT܄.FQs')Z 9J8t(o6@͛\{|5 >~8aM6N-yr ܳ'CqȒhA^HD;۳^AgvUDhɢJ.\j,Ie0NIQnK1EpΨ&%N_r*G"]sɡ^*'&N O.EW4ϻPscF?72/ |ɢJ 5maU/!ݪ5І QA}dPzq>ۼP$XO ![]?Na#0C>g. B,]Rwf'{ķ@%:¿kˬ#~7šF!i{"Y #+ Ц , SSp^7i~y'Cʣ7wx9QwAa2-V_lTCB#= *b[♚Z™ sbsE6^'*G NK+ M aaZ#:7i2wIU}j3l&vOr481P+Beb -4%/A],l+^ܷ.im*yfoKjJPٽ3<2<!?<_q nԲ5\g uْ?x!4 M1sYV){(,[-,HB92U5iḑNBktDeDysq n,5ܦ/0-hrKIփlHw0fg*Kzj grŘԅ?5vЯl*9-ӌg= br#ĕbE679tpq(s%iK?\꣢nNJ5ǖT/6Adi}% gx]S'mJqC._:"2yR@P_ \o,KQ5uϢ1MBw@ ^1PP `σ2 GF2Kc]4\#1V7\l@l.G"(F 3c|%JS]~ho(m=Z_x>J6~IN#NT0/ƭ<5A7jvWO+D_槃֣tfZy~@PWvy U(ɚ)P?/jBA\ zPrXP7 j'<,uM Y-)ko-/P"7%WEHhkݓL#w̹z*Eitc{j]E)=1IjF2>#,"b(y7΃R0j-oi[$5*L ' /2 ;|7[s/HL+Z(}7/:ꌋШ%"~k:q,_/(eUoNR*](Zqbd~I 2j{èXS;W CJuY$߄PUS uL:}*W9 =W`.>^~ =i?eMXz!:{vŤR ٻ,BvⲞUDpS(UHaY ;.4Z>MUG*;=yM5 -<^A5j>ع`.l@ڴşfGV.% &u4֪?L `m(},v tfЍN>>vfj2rW5nY\ *վv-SpZd"o0G,FYx𶎖! t?v @,/ 9#Tx.P՝Ȁ>ZO f Umlrᑀ5,9Xfd}7F!J)QZbp7"cҽw8Ҕtg h7G^3x3%uzb.wW~ehDRf<Ǯ#m*_! I=Mu L}Z#Q^Om-GG-yc#PѸgՃ\^~,2|,j(\%FHIfhCX9 drq6]R%*˳%[@nDCn+J5CjN@BS?%{/:cׅ,?ډ"7_ql]),*^ն\yxFX?%R>DP%7؏moȒ:w p0Du<iO46yWPu{.btVUv;]83shQuapVeQ%ӌ7.Sloؘ]ؔ9[ERՒfTi|ׂ"4Sṇ9l=N -YHbBpDl@w.ڏ|pCݭj~&n*j4ﲏ&{`k8t0<I`R ħ`gNau#NbԦ7Zvl=K\v5u!Cx!G9 8ʬB/d03SS3% ׹C-xS==٭%uSZLS3q$F wy#ҝ -( CuE~s*q~1Bj2BȂw=h& }Ӧ v#p: :i } "BHKN p6!PihUǢM 8u 3Ft':[~h,L`#}+ &ZmbN=].Inl 6|.!-50)p.u`8GBƍPHtePL j>XS'Qi+?gk?CZNO%z9xX5"\A %9ow hʪnFoS҇WXzJL0y,GS )j<y(/ 0/ESikר_DCpeZ&`BBώY2e}A>?0e*9ص\3#7;}zt,UuhjQ]-rav`'dPyddcГkiux M(=ܓі)]8\J,{ţFB /pRQxI;l½KL"1LtH@ e/.h Pܐv"6cF1Fp,8uqS~y gؘYO3U}hPhآ?kcù0xp2qܫSX4X8桨8pWso3>U\W\+NQ}9SΩ)&5L < PZLڮy nOW}<#9gnh#19O/\8!XE~[8":<A!{g5:/LiӶ;5$ӵ+6 3֘bfZS.>FSn ]ttskLiRR-0/ry}4HXų'pH&Cymj:\I71XB{tdŰtnOa3Zv}k,-|ދ-P=nP6N<l{D^Ki?E+MfOWT^ bH>Ow ͧŃ7:/l?Ĭ!0tGZBXd)ސ& dD=!f+d=0)r0^^%R|Wwl`P;EȊe^^xϺkG< ZNSc:G xC0b^uAיv#3g4{:J݊R !ўV-)4(O^TeA чL@LH%b"ib vvH)9{c3!e7'-ZreLwNb@ f5^ÇG~z 4QOVAF=sH?2sGsA'xvAm hWft#@dvD:﷭c5߂AD*6-[ >.4VpQg AfŚUleyQ lmAV#(g0Go$,49FII}I3gCyrh_igqɹ#q!E [=*f Xj{%eMMQL ݠ"/=WdJbŴb`o1Q&} *fR8I? R)6񦉽EaFAhxП-vtڂ0HQ(ͪ:w3~w^Pzm?Nc}hcT4ULOW0jiQW ӻM鷐+{q>f$64u;-w |6TX'e:Ho?T֥ڳ'jz:"w)rnjJ!׌ "l|r^_ӭKˌC}2v d me#@zzn";.N[X|v: )5;ke%Wj58b,<ʹf0Q+.,P\7ci}3{έsVLMЈ∡ OKoY܋ډI>zvRZ(HK~cә|$4񆨔5]ِ5|Y{Im%NQճ#}/ƬPU9Z(o@ĝE 0Hs5'J5tYbvڙFFR;Gέb/p+CDk؛m+dyX, 6X%=:h(U5F&^Q#%/*=3wǿsg kwc˥lrxsֱHؓ:?@+Z2aZœz285 ݼ;)q@"_ho=B3cʆ/9JF\81iJJ>F.tÚ!GhLJ}i;Z4iú.+N&)*w)G :ZS a6;8## z=ii&T˳,( &^E #㉝L[ ka)]nW0)cу^œjj!PJLA̶f!˗ FzEcUV.=PP?GmҚ/„z]&8B>dѤop?Yj_x]?Bx~m#7ן|ܟ6!tozŝM|[RJӞ}L[fWL6&1В"Q͕~ayA*vU2P H%w}xUvDEf=QE+JJTDjvlua | DQTuu\~Xz5nh$l;Ib]@6" Fp|kL|g|8IIYW "]WMg}Ҕꥥ=.nur}Lӳ3F}ߔ.Ksx w^>TtS; Hi92N+ CDr̵N*յA.L$ U]U2.^dQ$f@|1mb9#EYJ~5KPzF^Qz<")s׍`۩ oL`L" |vO̟0 THd,DC&lYz!SGCL2YvcT@eEw3eIpV>M]]j3gެdKYxv㕐a8HTM=su8*]ϛRWϵt7.bՌ>?<5G8x4Ӻ h,Pv*ق ]m]ȇZl,CMH-{;"&6&T/!#e]}ĔC;-y(%tض\6UYԫgEvjUZ;7XWLH04=3B+R IXK^\rP'$8|X)|bLDԹԏ5&2Ʌ`spi%?QMFO#JGݸ`x1aY;XX pkPB;u!|%IaE9pJN-U06Y2gs1M(Ff\pq;T (څW-mK#V^ԩ Eŕa\!pݪyp8X=vl+;h9wӵn+VF)o1eϸzdjn mR&C4nC{4cˎz 45)eKlFbA2ڒNJkC8 :Ƨ}&3Je_MRd^:̡-' M4 =KW.FS>|xoҗ+芾޶mSW06,7W"V{ݳ1_Ki ӣ>mR%BkW-;&2Jem4GU!ǸJRjf|hrpGȯ!7yְà*eT'̡q&@byV=ZtNQDquI{={py9'wLo3-z-j,d-} h H>> G~#ogLGȐ~!bcr4eD0 + hc0ṣ̌o+KV.,Iu-)N){xpl.zrUC)Y{ֹkWn} bkI)i%k"b(z;GS% Dϳ\Ukʼ(M̮D02S`zra_XHI C*XEr8P@C/bMF|И՚N=Ϗ5϶q{=߽VLa;A-MdCW -:x.*1SySX-05以:%arAH5! h@ 4JUr@9+[3RVߛb#}k3(ۢe26Rqtv|L℧hfkŷa4D+ xbݏ󛇦 ڋ?Z_q̭.q(W*e(ʵ[- ,PAY_udžvۮH4; ?:"!B c$8SJHЎZcj>؄tfI\*Il%Rk3BhBЭ\(ӱH,m"ܒ,3pLX_,h^!ciZ>с6~6t8S(:ȲL]1zTf)˵f(1Cd&''nʂ}ӄܐd;ƿlB`CE8DO**p9%7 &ߴdz'F-+HtrQjn {f2]ZјLHZ82`RʮxR;a L]dtbqj_ ۊIV^?&~mԆ|//q 5o6jsƑಋSyrx.yƒ+ uDϙA.QJ6}z8tV(Rz8{Z75պE¬AjyB «үmk)Dd֣Yif`3Li1~h8dOz0Ip}}wR?.wCRPj_pKRWA`CV*a~qVXQ jb Xƍik)ƨ?frg4ecM>`]ҧlkp[,@%wbk`>u{}≯FnbM D"]ԭ!;yd8ۓv$S{͵o@i %IFUAפoOfy+k *XATeqQ,rY*&:/Z'T !nZEm>ի*55SJ{c2o *eTr_Q`{:E"TͼGiWG\h@Cܦۍ-37$|_* w2ՀW]1<2]a2ӭ<&/QJ.//tVHO ]z w0)У)lT;l/Uo5CGM2AXǤ{++As: zp ?k4 kdG2+!xjr"+)Nd>6ƞ5/k-4pٝc[AgҜ0oVl%LFm03A K RB#Rm?۞Q 0-#X,~@&D۫@%j1T|bBW7L\ștx`XB}yrg e,7r:7H~*]U|0'|'MEϜx,VޫCڅݐjԉ":n$J$\!-m()h4iN/5qC' ha|~T-Se0kxơSݢ / +_WGGփbLso5'AiӍCFGȒy{W{u\[g0h~9$cDMzQ/v}~ݖ[O:Fb\|y""yoxL{]"MCaŢ~v eV㡹(@°խ]lJFl:R7-$>%b/ \Ym<f!3o {nbRlh{Y^XL֔qREm.bؑ43֙Q(QSмm]b(dls[B54\z[}._IW6 $&b?\˲6D݁M$…o#2)?nO0x̠?6%+BJ qT:%Z<܀od0DxÄǩ.ܱA*!O ̑2:NMd iZp2l#'eؖ僦_#s(X~ CQu/e}C᪡y ܍qƍƯ[\}dt؉s"Wq˚Nk+}ؗ,zs3.wQ(arB:-UOQ2㈿z@ F+?Q\H׊WcäU#NAvu9PP`cv斂(ٱ>lM \.AZ/3sw+~ ؒJ *-@XN` ה!?\2lWRt! VGBCbMB䖣)u@qš+Y.Ϝ)^K.${)P6c# ԑlfW%uUݡ!(UX`Ώ;9loRIDuwv8E]KQZyyp㛬9OՑ@ IO6}ЖՅU_LsVwy.u{&N|႘v#uȘ O< #oCEb0dw6\kçM~FDvFb8`,KV7=xi! ,9 z\ ?lM4q2CEDLPyG.ZAzߠ7IVA3M'-ޞOyrϛ)Gb#twAp]V5Xz.*"CHъ{VFee/%,4)K:+E7OE*Έԓp㘜zG[]ap#|v +$7LJ؆RnI b ɤ[mNC}l3{[ߨQnBI%a37zŸc9hz 5zD5ByՈU\T6;#ِy^ǀԬ/D'Ի![34?Z-BӘB1,[#Mqmk/C롈xMTDNBBO0#AEb ,z A.GBd/cʲs; Ǡ&*Zf7Q򺈭o:z"Rn*]rFAT9Ó}I.|P:^yq˺vf#okR(B59mY;m6TzZD#n4@I*vIXĠv,vXmRǙeLLkJbBn^p:.#MF>0H:cb 'c\JZ@+y( _LKWW0Eؗh\5'b]-`.> >]L05iX(cb3vUzk HbG9}Ybڭ-¹^c$1t4ަx%?!P^j7,w-XEKF톭w4D1I?o|fx)>RdJhWUyjTis\Bv+k.+'[(YѦib q/MDjaE5JJŊQ}WUd;W0bd< `QJ6pRZ{nElh~n&y6+pW!ŨvǛ @hQ7MGg^ǡ OKߋ=h{LD* 2,]ݱDztާ#L^Wbb zޏlqл}#:rČDlrAD̮ro'#o+VO>aahbbL).![TN1)> IbIjrw͇Qu? 7FawLZpw.!vak\Uo+<@ mQ }aӤO9^RbϩR 5/Y}j!>YE>\ՂnG54jC]05 &vB`huǍN`AVh"Yɤ1S >|!^=T]^kBċvK,G[s䁧imJSec}u4n-Eٳt ވOquO>yc(uA~ZY a:?iLieC]N3glxR_XDZʖ̢m37x@`|c?KH̶~r\tʦGd񕉳G+-ūwHA'phx OvK\ibW*jdXȠ0!'AhcƷ)Ʈmqt^WWxYTG(5@B/?c[i@BȊt$-_T] &?]_>4Q{0cI{VD2nz \Gme\߷XG="Y! 1\V'`,SG͙Nr:W$̦/I#9} P&M,rA^c P/8{,1 (GkTˮd瘷%S y)g8$R7skMkxraGdl7Q&o2VuB/`kwz\[X`pőNFr om24ˑb<0՞L \\_q'| #,g)LnID(G]{ʕƎ$U;3&$2k ~ EW v˅HBkX'zk¡RSrO v Y_Vl+[2b=Z?4T`$óޣ?r# ƜcXmOϷ:X%p`S{C"ԜzOU7Zo ˳8tu+ ; p|!/)aąa6hsOi5L_!8 ŝwC4G \t,5H]kC)"qwZL:5t?ZIQVc2zwe ́U=w qfs̻"a";HXB+;QTkqns1䮤9xMk1LX U=U.W^KW(0ýmΚSL"g X<10IqEA-00"FFbJ_`#?ʅ-Ht`'('cdZ8x4L nRibK7s7 )>ބ. A-N.OrWÝbE!EvEӗㆥKdcSbx{QHｶշZa?zN A":"P$dgIOnټ 9w' ڀ1 P"'M/-Sܚy mNv,Fє^':ї7McP3U~t]ZEIr R3z}a:ZyҨTiǬDs WDSXW`MWhkz1,1G/]*H%^Ze:\F; 9˅Ik>5ٔ=m IQ'F#l4L8\58ɁP7^=&ru{pi}Dʃ4L9O(+ SZ&3e0pj;%qN2'4dE~)mqa5>Qp ͞7h?}g峇y4AVcja 3~]JF$^y/k, 5 Qpv'!@fo>g!W<~U3+ޣfC0 XJ }k+Sfɬ34,ݝS97UFe,lɄPZh`,U.)jjD~y\l op@*Swo <_|Q ¾>ΡŐ5ee’>:D;b=^#Q8 ;Da~D^1\G]尺At.6WCM[I=rrd-+qͫϙYI5&r:=vCi*θV~4B9dha2\Q7ֺy]7fn^ڙqR^O9/~kil_:uap+H) y:բLu(1BSژ uW.D: Ρ[]zkΏ=u]25 {:WBDjx-`IMF߁] =̬H'k.#VP1o8%q̸FՇz `H6\8$p%??;oR`-5״x€TE9a?CMX_0pưo(UM3d @O8gm<W:SZ7̱=!5/$],HӋ뒓ԝEi %q[8o,.߳(bPJyG*]&j>YOqMb,wxaquh29s7\:h˝POT|ajE4H1@oB|P~RA=J]O"t" ;[}Dy_BCD$؈sr*Gbj`PԊXakO *-)tK{ƭ10U˨TC[$lFLooGLMZjka˟b#4v#=崰MrΈtJPj!ɴ3.SVwn,Jf_dbZ˾Hn9b?΍ [UtAnK#I>Vg/L:#)3ms}YZǎ^U}rC*e՛&DćNw-{ߧ, [bZQGx]%b!娸;,\%| Ħuovx)Wf/gmve#Do(F8̆XtJSE;鷂"jПK-pCoJ vm'B Kڸ> khk, I2"5DpCC*ܿzY#Hh2Fs#YҮ ?hN%~Tp gϮ!!A9hL6Rl5GGk|/=ޒ*Hn(ӛSs揳€{$7-fOfЀX'P~ֻю qY1V6zKpVctc:zDe`=+?@А' y{w"`)BщAyUA/?=aUVX+!iNkPuㄡ1~6ُ)C82{s=uHNo Pum <ȝ'F({qV3e.[G/߰ 3w)GV62:5_x '0Яm Da}E;y[ p:벍 lͻsȺUv;{JgC4{rExL&u*fvØ:YWYQ ?Jqה{OqCMX,L3of+g 1>AmTDM箦Y' bފ,h >%ɠ:!Q]8HH%Yh8P^2R`4ε 8׶ г 'U_U$KX&myV棹s͉d씾('*^6JJ|^3DFUJjg$+v]TDg2l`OԔ2mG:?M|YͼT@KgN 60ldZW:Ok415F2' յV.gwx\&śGJQX׼d̲e>i.{Vl$G9;L[y>X":Y8Qr) YM@DdzSQ\Tv3nwr(L(ꝍZ@k$}l SE (K ##h"ڇHkuԀA~u&w}2[Rr#)C ; 6Ycqdax0rpM@ǮPl^ }}Cg$i*շq+?GkA^ V nRH֪Sl `c~BY0ܕ;`fT%.^ۨ!>_3bi=[YW˟Yp맄%Ɍ{/ND! _ASuS&q6:GTAȇC9$ 㿪kSL`< -URuӭ@쓮id36Q43g_+H6Dxn|!BgTAG?36ECuyzl0-=`Ɂ,@UNv&][1g)r*Ǘ*%Ǵ6ZfQo]:sLDv ˕%bF?s`\T嵀9S+O}ԨчP!pȠ(7_, Q6G>sQkYgSi|]Ʈr̈g98~4@N M,0o4O`zwi yz1[ךgalMz# ؒQL3*,-0*bD 9N+Aeފ1vyR@4)IB:NNOk]I0T~Q@"b ' f:8B>Ƽ/ki햿c԰UxUnfɑ5;=`[A!7jU1?5h;7M/)_v}63&r7ii&HBHco,f.6MI_# e:c}G-c H+1l^FfmCY'קtI. ,~љxf߀.OVqN弫8cuvx He\|^dzTVzH5(c½SbVTp0[Au(ǸI4>hhn]q&(Qo!?4j)sH \T~?،i'z*l[f:rx?$2(8)sՒ1Q`k,Eb 76:ĄR xӴ(^< yH+ҋj"Xkg6s64$dA2dZ9\`}o-y{d+S)X. L?Xlۣ?i {BTHlifh뿎aU^gugMĨ)h2jd O,z'6 QWG&=+ԮMIücc$\ ꇓ-U{i, !P |.KȬIkrhxwpJvR,3o +^,WAkvr(VNԶWrPaFhh&ưDlkJulIh@_Yy_ueV 1/!ڰE"Ajl4Ъ0X)jRU5~OYr<+G>lUK,z/5,5W_8:!v24Rΰ[i#EZi.1K,ij2Oq+&zϐX`Qas{q=ʕ՜&<8nZD,-zj+Sb DNaY5#Vl 4l"גϜōq%Qrgo̽je|/Ƽ꠻u a=v3RQh_f$lE'#Ny3r%HI/?]8'D^m)3|LX+}Y )d#c-r^AS5nxr/u؞Ij:r)[@T\Y*iW/Wpseb ~oS4pfKW&Qsv;gh4˰45c4(Iֿe=olArx6?0ɋV .g˽ao2g4s'A:fqJ,XW|x6b_|J<1@aR_v!k>^ e#Gb"$ѐ]NɝW򿺉d 2^ah_G#0E$bM  Y z joiz%1An"c{/)Y \FI*uԾHX8> }ZHZR$2wձ=]; shbMCnL;g8w|q|p[s, afyɀb|}=W%C}dwKR?V\m'++'p*,`;< 2|cjђߏ4؀8 Rӿ8֓iR_"m[aDz A<5/J8@C(זִ LODN &͵Ԗ{.YEudVWt0EW|@v=,!8 odgJ)4TC j Lʀ)LK{ir[w+,eI\r|5ծ5F-1L^`Rd)Z\]ٜ:? 348K=gфW.y#0@̺8D=ȐE,*\&h4x>UI°E/Vfwl)%fiN oaX<|z]<4?Ym}w lA]+Pa *-S!bbJ Kn~"(dۺ0ݾ3s%B[T*.KdD1lqyfhxTN"vtfw[=*H 8F2ry_t|B' 'o?[;hXb-- û "uAy =Ҟ]*܇ MmJ*$o6M+Ċ^HF_ΣgQ)nm]0(tuj"aծS:yPey㽺a `.`,,805׮rͷLoe ihxR֞4[ xq޳Ĺ)8{J֡./p˒S(R L_b|GX$:"^ M8X]%IhuBqH}1?gq+'I|sHjR ::7qJ#!zM"K@Hz9x&|:%[GZ]Sa(6׃ )66O"lX~bH.W͙2`6)(F'|I}d Roa\D,kX'Q[GȸYUm6:EyEji6_q5XAzV6oc{M0j UTxΑ.^}A(捶 ޱ"|uc5'т1E'뮾iMwIR:?F R.?M`o5wDs!,s/ ߙrLg `:ELG$qCpʐlhIl$ zQ&gu7ۻ`} u}HxOnL! z'jdJ/#ZXO5xp\Ս7-8c t"!CvϤNCN2Fb!릒Ӷ S9/Tt:}nLE`AB>p֬roAd/pb ZVFП{OfeJ,)E|-#Q"_@"A,o5xKIlwc[YTDt.XskA"'%@[>տYod o@)(,aXw~;:dOvAx\JHE;ЪXRxǧ9QƦO?RAs  Mt}t#)zkHmNȻ/ZqWbƨʑyzYP]\JƠBvDd~FkDRH\Tܣ-2ÃA=^ v?\SCL:"m "D7!ܾ_qX6dSzE\VЊLVwA_POڈUWܶ.xzIX ^[|b>]LG~L{t@;MS3iC(G _@̓壴k Llq /v$艕;.xDŃ/9"5 })4HcaV2M-j/}N&}_Bh~&ݺTb+VĴBSǑYb5-L@n YX DL)AߢQ*id9Cq4xGAP ׳KrkD}25P ΜЫn1 %oQ]f /o(2oSODd|md:dp["= <0)\9xUE?Q9`oH1_6TJG}+4(Vr9><{CRUo(ݸlت ?d\yjZ{=E4>RY,;#<=&-Ϗ9| $̈́_\ KXKX n7L/[bGbxucJ%]D$2J &'p=u0cXXI_!h VPmg3XJlţ(2hCpFWE:~ r+U*gEj8eET?h>/uxreRWФZW+ qQި8mLa갾P:ܞqƖ. bYʫGüq'͓D7sG׾݄TPIcr AAS0U?+Q TLj_/-Uи"[2Ջ20|Q\W9ϳNnhxh)HmPvFɘIg, ߎj y\-OG'\b&^)*.ݙ}-|ѐ wc*טs9LKL;%*tQ_er@ ';ȸooFwDq.\c`Tl +n{BrS/CAJ!H,g*W ΊMN2.?H;Y ŮHtx,u 3w=5w]ZAnFI칍ŗ܀(2< FSc [_Ѝ_Z&؄񦢞c@LnΩD31 K( Í2IK}͗O(1soܚXHDXPG1uOIG6P0t7)zFKAx A[Зsֽv ъ-J+r=I=P;zFiMD`Nˡ3Ij47\PYFZn2āDњ ؀e7\h6=N;plILE׆ypi ,g=:=x=0܂܎]k3Pe;Q¾2oÿ Z-4PhIzsh\m>'+G,sߕ-~$f*8W&҆ȼ؃/+Ԩ6N'l!m7 *aze I6D /0N:F(rI͊"@FejoVk_SبR46`D.6 3~K`:-VQ7rxoR'pMFCWT=q=$9Vr2FdP'(7tU8P JY^0{&0PsqJA* VYdmC$ޓy{0+HHSρ3DeA%H4T1ЃCK'PN2eu|cT֭yXsF"LG4x'avE=-, FJL2UPnX5f1SRvrBfc׃4pQʾhJ 2Q*ri0!#s?J{j$G|Ҫ0%HH:佡SGl2)Bːx&vNGL&|4n2Z ߖ7x^ %ߋ.P^ɖ):}~a\,jB*5_|*(@ȑ렶DvYvf0†!5,榢TB-&CZxI;:Y+Kd!Ow/F-hߪ jZaiE]،U\Ojr V-фMs\X$MVhq< i F6wTeGJe7[nQ^"p#-Sۆ)J?)xTM;y]vPMy* adc1X]_iXEІ׳禉vےI_&2N=AJf$Pƾ8z%`w[ >Fys,m/y|ee~xd7Mp WmҰSf+@"=mvVL;[T&p|0fk.NI~EF،Gs/ ]C>6ŶIR]tmCu<#\HY(I> Y~MyCIXroDڰx)=<3%? cAUM@Q@8eH?ڸ>\ J0f|kvS҇ n3j7sc=`#eڅKkFB_pўdzmW'zܝkg3pN<<>vCOaodR퐨-'u|n L jw}S/:{,RŇ1VnpU! Ҵg* [BT9 z2$&PUтQ}l'??!NIɻ)5n{cjIoie,T b[ݷMF df6@h }ՃsF~ Ms#ogVl|g[~(Ӓf-lAqAi1ګF&'!g'7!Y>1 Sc邓Af<%R9w1\Ȯ$?.%OPc͖ν +ո_s!bޕjV"fKZ5Kc%`__pOMfG SyYg ),Ppl#ĖLY86d5p!q'ؔ}/5UHx $ {by{R/IB.݈$'}!}CtSw.!0yJ6z$lM*C<%ʒEy8U)ڬ@~qKm+}S f9.^ü5+wJC|!ܪ@-㧳!Τz0IDV Vx#[/Ը6hG޸]/ZETBm~Oc($F=FƁ W)=m-7Xr:SmQaP Gg ߗѿ,ɂ<-#l[&+R\}r˴\|nw8Ո53mQNXC9p90Ed:8EG綆hLlW#lBҢ?Fd*O#ߡU.“}eN@7LRuXyƏ<04rf|о_ y81HA*D;GsA mL|.' /itk̸|l-򷔣;%HзbHQ;DOd\4C(s\qRPRZ}Gh>H])ND;BV+#2^9^yYbxd6"4ɗ@)ǡSH/p%W[7i9nm)Qc60/AV3 5oJ}jp![  j%VYcQ`)C@Bޥ-'x?Lj5#YL*>).zQ.eo;fУtEp-0k{=s0V{Ѷzؼ1ѝx5C24n k E9wί1pBYáE(Zxe_BD4vF1&6ؿ7ڋ5L0tbk39һݞUFpԚ˓XĥM%rtД1e ](oyX)˅P\SaR$Z"yZfFY~b P*Jwo7 Ŏ<@-T {_5 -V{5&AꤜWeICpnQXsM|! [31p~FsP{3@5je8Q 畲( ^}IA L]S>oVT0P⒢Vb~ژ\^#vB )h=(ҡ]$~}OH S\2Z@I~C9P+Co7J Q%cJ?gmno`Jֿ'cga$߬R'W# 3+H:5+|5z؅%M.|0UN!؛[6 J8 UTf.Jvx!v3ܲ Y.K=ug^!0qJY@ȨQc> d]ƛ@uLԾ`KODWQ=1(g@C,Q Zؐw/\f1 R7Ni|݋+窾2X</ڬ+ś Q@^ DXĤY2̮P^os[-խ>q<݀iXbgTOF9yi%sNnqXNuU~X%˺Oxy| rb3EF'VGDn{(vS)ğ Zؖ]C1]-M:tr.#<#dXha1 b8 Dmi`zuѺAYb)q*>6ڞfvrL n)@E")S-膂ہʴvdel?gfǍٗ\$9YHC-Q46ӢgC:K@Ǝo; 5sʵYC-/x2Hh\:yXµnn8[-82FۀCTTcX M7;l%L-`r@'u r@Pfܶ(0 -4l,/^ еz߻(@j_9wkz5?PZl-{:o`"pZ΀–I Z{Ѥb8m@ *ŮJq"4 -G<^Byb DͨSfXB:}K(.D‪❸U~N6+m|dR1F k LAUTii\`E FXsњOc᱾CIGq:)分15\U!F-2b,3sǧ6,RI)Տ3RVݤ%7XZQArB1Z@_5.f =w5}u̓r==!HhB*TuhE$ؗ!Jq\ ͽ> H106]'l\ɋ_/L[rT_bq+@/wITm `EM fLXhwJ{ yОBy=?1wěb2.-i'" a`,Hj oX6,5$Kd <0IBzL[Bw[a7O-19 4'\冖݇10(T{bOޕTϱf3.P|7jZM,8r<W;OLC,Pk'LMߋ  qg;2EX rxMHqR<7c0׮4VHET `CP]9+L!qf&3h~ISW /,q̄oQz Cn!]ƭ!1A1gvG !&=틮m±Eg+kxTFV,~t(1[RN^c"@EYNSG=2H=.~XYS.ұzox QC=<0)x`e<>7ZX-WmWIL!AsKT^!EFuвbprx22ieD'řɒ˩BD̆~?F ALc`&#! 5HLJ^@Kƭmj A?# ^\{h"TY6E(/>O51y bC=wSHMH TxtpPe(QT;2%PFwI7`u%\t ¯-l _q)j.Ew:>Cu&qO^s|mq]g I=;_=iA-mǘ^wkP4t(ZaXb}!en5͡V+"F#Sf;vE y9+i8mEвoPSCڭoK2^ltD&'Kz3y(ۯǔxk^);{MyN*mRj3H787)^4$yʞ2QߌݮŽm1veJXِ^i;0D3ʻZ=nDdſ2cƇQw(U!n>pA1:{+9JMulwTG:Pfb'_B.5R%,QsAYt\3䧐[MU5և2O.mS@h}1c5q'3[+!P(緯U@B,xoNG OJgޔ]Db&`FBWiktNX-0DŽZK0#+tmJP/"GsUMѿ#QO]08!^x)=N}Z!vg"P3Gʃ%RgĐ򭖴f]0,_q:SZvA .zudr<-x yIIH pئe,&uVrD(ad@S>Ok_ɀ),[e8ep]j(q[2EW[tCcw.a!;uJJŏzt|~F`'> eFA{&}.sx BeQO W17HoJج.0߽řM@uU @F~v, C!izc N22*/uI+FvtB2mfecYCaI޻tL0ɌVjlT}4j; SȪQG"qɆjxO9'%wO>*lU3ǟ)/f (2zͥolg]НDO^&#rП|%9loM~̜%(+!^Ew) _xGLp{b7[Gx_f`钐}nm`bd~691B@\Y* 7$E4A"9K{6ƹ:/@7r+H& s8W?mp;{Ȼg)(KR?|s#:FNL5a  pSҜFϔH>~m>+"/NXf*> dd$z^jݕY\D&k~/Uuށ4hEn>ݨeLh~Co$d^AIzѫaV _f(cJ(Wԙd^1?}w)_.\I_{!ږO[. Mބ6 ƶC=6BJ# bՖ1soO ՙG̶j3ys߬T[]+97>6JpJB3bSĔjI%>)pGLez,oOwɲ BfFj$Ͽ1Y^IZB@Ɓ̇;7Le .qmjtP\JN֬2pf=\n#?.aϘK\b˓*B_, e/N!zT.O!t?J_ז慐Sie%VX:#ԕJ &O$70؍=f7]ՔO?P1 *@|"2*. ~Cɳ4y?PUR{ }&eUd@]NϜF(^`A9Ǟv&5_IP^%Hl 0\46gGXds mLWE$>ƆA&ha"(6S(Y  OE-.jXuSnu9ClәI^Zdv4|'WNq}HMId͒y uu?T1b?Ifgb:7$i% |9BG6E j((S'Ov[i[nQ$m8sG(.yuVl&}7d8jb8o*LgksNѶM8#UQ< ̕ 9MXxO4}UcF݂E|N;AFy|] Oh:ʹW3vwicCe-yֱJq<0 Ӯcn+yil`_6mIJX,J«.521e洲AŜsNۓv! qUY)j /I 0zh,2YNE0N$H~ob%zܦQQzr@{֗g(~@͹Tiƥ>$bd{֙6C5V+:9SsdCsL+W %w+R{J)A6({I5%%q։b$:^F03t*Ή H?(d.웶4fPfXbUϛT5 yMJ<c+KI=DiE/-P&O-&DI]L$ynX]<^j@\Wo_>kZq.o?k9*3eF=P3j_vEqQBV@9i,đ[WF.Aq|VBk 8[#~Ro. Yy5z)eFן;xהӹ'ƽۏlX+U~4 bJi3bdT ca7`*yrJܺ_uMB[h?ɛ?!B ~Pq }uĤ*I #馷&a$@k[)w7 +'mR1EjNTs"~k:ņc%~zjYP\)y?:"r+FHZ3?QXt!uFkd1URLO9&dePs?X6~d*6?OhPᯘAO贷Ȥgw xL2q^|{c/T |Zb)\c4*qُ%~> 7rBX~ZM` a;bݳդLKG ӫeWEl ~5^pGbP6?"ߔs&R*RU% |wQƃ9BH,6ycQ% FWR_xl_2ފZ)s`LJ>O{GDgtE ˆ 9Y QVɴNCyIU\ޓomJ \TLL*@lᔦX'8֒! ɔO3uӂDNWRzg}Დ]&i|pMα'Rdpbkn[N+MS^0%&ʗrN&C@~||.>b^0fm#4BY{inүLU\ J2Q Z_aU擫F[]{m^y_@rI)7ҠyϦ;5:RVj?x*z'qƸȏg?N(e5BׄL5[N5_#sMPGQ0v*cb5QH^r.5C‡WR8U; ]kcŸM,\2yx~kK4h;D0 j{李Om@&+{u2Gt;aDлws ϓ Q?}DˌqJXs45o<ak;2#qʮg5bU (hj4=`,qHȅ2֘!29_g AX!{0dE4b+2Ln'Bt&r22VP/lZ-1vRA6cA< svJ%^pk̨)jD/g sgDEbNuGfY,>#saD_^$EhssrDR6pI*LC'&LVh?3d*Haɟt@Ŋ/]K2k[,a_ I ae,9$(؃|r̬tMH^)@Z ~ S9I6ټ(򉇿2&x+&-?äs2&vrw LB"#]h'$M 5_Xɣ0|J3ӳM*F32M/`h,hpNs{|LÆHD>4qdp&@ j[!5ZUĘƽ4l K=`w4Yk'#L0G삅xe ]b]q0I15#! k_*;).4G@-_b#YZ+N&<~&5$MKg;)wniH' m6+؆OrooE̍uuJk8-<A)Ë.a ݊7_"Z4oȨEw:a n!Td q/PoH)<6ҾVV&(AI%{u9qiE^?/9|PkjloޟAHuGBUsf"Tx~!IvP\k534,c6fR T 'Z} ,CkB@u\@OY=]sw+4r IN/,i&`zb {[;b5G`ndc86k+pLkÌV)ԯ{װF/4dlL 5L(?tؒ†kEUQ\ 6lVkQ)Λ~ႂQ;QO،(c,O^u?LdSj!@[U!&k a>ji@AaɎNUHqɡATݔ4*.{̦,o;dq9t zGǬϒz$$0*?7Nե-4:`c, X8QåBjDCJc"]+ݯC`{lgp"<M*r^Ȝԥ_32&ȳ[[(S] s:6EZ];Jaܹ ؾRIȥwp!NA?{א<-VD@(ng'kLA2%79 >1FD W0| =xM`5SeKI 7CZ]9a~Ş݆5\(}PYd; |Ъ|xD(^;hPRiTs&t{7ɣ)󆂴Q1ky*?ms#tO? T)BOVH:rA8/שr9vZDG㳩ZbυNĴbM͝=[mGL}e^폒gcb\&$$N/\0&eHUbCg=^Vs;}u ɏ(&@]e&"5EKL&_ׅoʺY2ϴ0)@`&WQ52 86YBg& ""YZ Sͥ)ˇ:%i czCsNOd?t6iyZ|%պv ah"d۰hXEjlն8[!؆eYُkS V'Ĩ{ O[d-m O8 -aUZR5 kIUظ,tbwxjEFsdzsh櫳;ZW16i+Rl$2piӯ?-̚mq)5@svu^w祡{(|cGM;K'0uiP/k4>¯Yl"yΐflP]O/ zȇFjodp0SCRף,ǯHTM 271-&`֍x2Iͦ챘%ziJlJmޒxRt1`pUD{rY&sgљ#8a/cL[3@.P:I NO~'3{Ǫ+YfDPnqL8&ex SKZ|wO*C&zX\{܁-;^4ؐ.8||sۑ }պ\Ej `T .WYZoLJ<Ȅ\dq"`~噗cH{}/O0 WgJ?S/s4O_WG;n~Q@_X ^}VJw/j| rg|+A 0gA;S;*fY1Ln|jĻ7AOPnzxb̈́9pV)(FR}be] '{r^%:nY@S˸CI=5NS[o+b<:^8nPCF ‌i! <`;:JZY#x%̴^#+LDb6ICY8XW_i.+T&A$ЙJ=pZ:ٲ[Ay#nvBOB.kC_@S-q֏`ka+xN#} $atd\ű=ِE0qf+&<|7-p:vEq9F)miBrp\GFZm\ѱNBNXxVFΨ5$Մ޴Zg[Fog>$ON4.#'EVv[IP*o~Bro)+A WXg"NF׍f2Paya1KWXq!?=hqXZw#t"ɫ;}b6%ӛ" ؒ Ư_'%٢,vN Zz7*Lh娦f"QXuiӠUOC!ai=ERV0K\N,p\xRm$ާ5NJ2urFȔ-0`m5h jŨ -" OUr" +;@ n.'wY%d]#֟9츋#$:׆I:cjK}=OP\Y+f%e/i7P E+iە{2VA4- yNhDǴ9DhX|%|6}آ19Wͭ G>f-mWPPo΅ǃ>+U|JN8Aޖ -2w{DgYA`  %āȌ)g02)iPW )7dX,U` :=`_5aCe-w.<%~KfIwH&|l9H SĶ&9҃T~r ZL-xˤc8<:ˡk^w1l,{.}&K[x$-fDK3P(Ouxé}2| 7h'a)sH!I{-3|*GS@ 'o9s7K ]>L!yp45?X+4azh[/y6)x>kI}W;2'#-|/S2Z汉|\mEN*ls 8^3N^VK'_Tf<5m GK`쮌6B|@x/ȵPGm҄+8Tj"5y(:͈(4q$GL'Cm CjGVKsRT6mUc `gPě1QO #ۙeҁJr|e:!zhp9)?WLJ5xC,##ܺQ-|,,G \g֌?xDۧIls@rQT"F80xS,|'1;HAvv:t+e=v_Sޟ+玗jJ# /ܯ=4jl Ho50EB~h BNWy̩_7vl7sԏ/x7N"$K*GR[WsL¨r["~|5#]cI3K명pνUUjQ0҉z uVc Ҽϩ?o*Ja[:P(S#lcBm=BdtW6\Y$HpDL/3l$bC@z)đS_G^ 74v]632@jHƌYe?VoA.cmsQi[?&K C-\(P>P/YZ͉aPovEy[􅀾\e]W '8pcfAқնQ!l*W:L&hөT7mf{L- ~eHxOmVw =1fmdF;/Q{v?UWS3P;6Ur*wcA ! =[chɖT#-u]b5@Ih_S9[ij' wrU7n:J2#"UR(7Lib\h4ڣ2k3io@B"^%ʆ`ri!x|kPN@:WQdq$LLKpyu'L?!mR|r5~{}742S}$?7_` MN[ [<\?JMve(Y~%ѹ[+aUgDXN昞̍֨ţzekP =ɂ8Sm%- UZ]n =`!ei`.}" Rw?Y;wɊSlD) jsGc2]LYoe .Ϛ[<_nH4R2y4 z䎈XEꏪݱj5R@ԡVrv@P*:6(ǭ|i aVu٭\;8AA5˾vD4-. Twav as]7#S6*kHfS+}mJѻspҕQ @+ y6T`A?~ES9?0y aBϷ/2.ͤuțP$Q_ :^Z'{>)\*Ip7{}20l#?UemY|&9vza>1>$TlU9 F p@MmP₇O=bp5iscM83q([ ƥg175z؅d `W=?  H%V~_nTDu6!]lB%B%N:]q䘓-ûqDo #J۹8Ggj%!QZޏcw* oѻO9h(bӼu) +KԞ ;nǿVs@C4pKTӵr?cPNWa \e^~.Z! Z k]΂ՠFm~O>m&e/]J&;vP53kZVUu_N+Pn?lw'@4; !ޱf>*zllR- -if`JV2c͒j(yyGy=3z?*aXR6MOg5ز.gKc|7PO1_!T@n_ŵF>\L?5p/4/| O>"VWdQ)RB1NTů¤:.#6`' 5.j޴G ?.eOuA*ϓ/ Mg_ : -~|L(3(z_$~≽etM:Bny"%ak`W.Đҫ "*",f& CY-i&1$n0mqYc`ݷ a$D[6e70KSS/Qm<gn: }+tT8(hmFLc+6V3[;8ILdSFx1. a۪c:ĆYWT Cj#[,_…xHsBRN%E*Kw&,2SM 8F% r'_0_dF! l h~2?ʘdG f_ǰrkX_b>0፷!fN@a\aȆ!2j  sWN& ٗE4) `+p=f!nllV}/%rXFv鮇(wyz:V]'a}:)[VYоQ0a ױؗ8u*Hm/ W}Q@O@tTD"Gt. Y;JzVeP5s *J1At7ڐ~=+#+ԋ]=d/ foMp>`Y,uJ=Z26;-*NM=U&>XD P99뫽Ln`7ȯ#:(p4gsj1/d<Ǫ-ṥ*k2}vO죦`p`)1^UI)K\ӞsQhw؄iŗ鵾!E8 FIn''g^j x;7D73ޮ٬s7s`/R=ubHo_uO?srh6i.3Sif0ף@kf t~`N]v6gu2BϲHHJևŕ])5̦#DM0]Wi샾{ڒF$6 㔠CV ߴ=VSZ?x#,%yba#Š@"եp0 iqPRKz5laJpdAH^&w*/J +qVͷO_-G.TV8jޒrӈZrk-:{ǓR3F~6f0<~]%D}FطbmD/0I^ @$Ilݏߟ$oBoF 2P0ʬE$kCq, WIۛ`}C$YG,9H/qhWˤe@:Ş4Ccmz,e*A6Uz:x5t{VЊnEB+[xS8I.(&1{]|&4J,eBz?!Mi}L3F:W⯓UU %Vd ϐ "k:徣%cH]bL^y֠>XOYFm꺘CEq .t$,/M],}2V`OEO+nycO$|MA3tYP3'fGKX;1#W=^csI4R 2@~U A%JK3:HeOVɳɼwY'yd:'Z4m`o["NzO~c~ʕ:=E$*10ORNEEÃ_..@Age6`)T:wɷґ(t8ߒ2+zuZVRϭ2'/n f?e)\,zSC&H9q8׮q'9Ay}w*H߁P~X)O̥Wpgu)pl,H NcV=[x-/agԺQܸ_ZF.o M'9ۚ'BvmBXp"p8)Hx;u'5 l ,՘l>m߃A*VPR`h' *Q6L1maÖ}0*~L\R͸ R?9p~u Y\?4bI̴P hV^ V= xGj+e@Hˬկ7ޡ1\AU Yas+]9j9&4 * m6|;7fML6)4ܝuejP9[RP H~ m#ZLFG"4}W7!a[dRy`Fbuj*N'ki+/>}^d + 1ӅMqG†erL xLSTt]@;(-D%@1>"!07PBďxHq.$ωvgX-TY)X &Gнn@H'P4x> U(-m%8[(q59m&8D7n@p VB\kv2ָwDyueMn/vm0ժ/L4b*"6nHp\i+" V0n$  9I1Tla!WCFA׳JpWfPCu!Y|%d~{ @ҽ~ZH =|^xVSO|]c;3\r-@V҅M,wfB+a]c#^߮}j ~BbcO\'ΡHa&&ƪdO^W.oSRa]qJow~toh<?qi$5p5zAJh$6 d[( M h1}o9߭+__?q4*?Dp$Og`F}@|3ЪwNʷ3"5ҡbF8 L ݮZDSSm@;4= y!:DW#LtPkn*'P;Df$=hny F^v6FM&YWro/Ϝ<:y&tTҗPTOj5 v~Njg\~̵fuP8& J8_yHT4mH<xe^aP‡|}vDdor!tz|ݬC59U L9gk|C{ʈe DӡU%Z#<]ojMa_5 ^lÉIi fW0;둩O %4_Ü`Y {2T1nDM2 ssYc[e'ozvokKB B EWA3{.l"بx@A7ඤLzEI khX8]s]Gd0Ҭkpl80_]qM\! ΔYoh]FK @$ZaI| yw]"hU-ƽr@`I'@ՈPi =,lMd&L,i>7,w׌CS]W+g1-s^N۟hi 9`w*a.#{9n2ͶϨ_=W\6{}FK,,롯XqJg%S]%)i&#D܅ l':-Sb ;F'|1]IG0kwc'&}4|sB0 S3Js(8+8o"fMyI(5w7U>%nxAn{`?j1ͱ83#8Y4*UV>oʘ%sKYPEc705id݄2㜽4'&6Ñ[mЪ;.XXV@:T/T膀b=) 0[g_PN:9Ɔ؊=SIkI>7-cQ(0F]Gu5C&,LҟuXJ +Bu˖Awq &b3 xchA^ 3 D5Er/+ xIvd;k5ҼP4SQMF"zU&gΪ vT8>Up9"?%\=%m8j?($>) &Qb}9$_TPA:d"cX'H]JAQ$4ME[h}B阣fMNٮlGC-F8՟g mXە콠u-a8G j|6 䕑^[i<*jˮ$H J^"quO8(D1v }&?dW׺,?jm]v}Mٹ e$@0wܼG7j+rӦnx'\ci\Ƹ%nQP=ПMќ@!XI3 ']av}>EK2ii4S<:]rz}Eϝ>՟@l\5EGHBߥ`ʞ4\u1@A%?o|؍Aܤ"ܠF);,ؓdoz>m[] Y&PbqA0ei\ZD!xGs>{굦gDn_p]iиW쯡 Ù|3|#]-D $k/Dcp.׿ > :%b~2}Ve8 Ul]Jk7]4KP:|eW ||9@mXzYH RYF]$B!*\mڻX5i+߅e-!PױYƵdC&?fͺ)b[CF3>q(oRN# J8\;t^>Iks/'ݣ|?vHܛy~@Sю̖qD[1|~Bc^35^BX |lp8z~O_.sQi!n!v3 ʁjo ;DMTfxZ:7|甦Kߴf=۩%w[TZ6gCՓm*"0fFk  AXy, an_{ݨ(I'`-qcfi-nZV<yo0MQّW[Q iن{+˲JBiwGwQKj.HW5<ZmRUrXD8>c5ttX7Tԝ'_tS4 ϫ:G_F$'Vw\6ṢZHJo! _6UQO4kMW}zM[EVkv䝲hxŢ2@+Ͱ/x7а%9k3:Nw.]܉9V,Q xlbSV2+ 1`%&w\0ڒ%r9l ib6x!߀>57־ iGټL([t/F^PG.yxhA*Q5~xAN@45U㊡;X`ZAHWх{v ^?yDģAc+dz-#q'Ӊ0ZA2 &(A]ʫYFxhO5 91ǝU:]538N^)9BL1)~9\ ʐ5,_~:1hU*&\aeO2AЭ/k}f2ߕ1.M9Au;}xT'Վ@CnЃ PG jY3/jp $T qIq:lvS ɼ5,WLj#Ffah;m-^ƁQ*4!U(Ѵ3"&$^Bn%ٴ]WDfhӮ);zse"ҏIY%~wcr>G6^/R;SfC+):-$ %WHjC>1bCa UyDKAi Gסv.hwG*y3D6 r:EDoSKL.%uȉ<Dn6jb9"KPAyftuWATId\.H^k>i-8aׂ10\iOC[,B. {)! G .w);jK2D'ؕixcɹX?o&aq%mNKZcieU{NN|y#(ݔJj|p^VZKJLR sEPVT"kY5gԢl ]4mA{`enh`8O UW*rE` # s=1F\[ʴii*M0?ݚ|q:Yar8^(kT\͙ W13[|/bi{xgCA(A 9id"t0I|Q>@oRs4OXYc:\򡒸į!ؾ܆K^)^u hZ{S#/'D>^9X3[+3Y*]m7 y]B+J\6~#= G}I*-\ i jXXyde\ xû 68ZSh`֌{ȕ_GemVY&~='5G`iOhSW*# ޽!! ol?oȾKfW[svg$/pڧCۄ)86if۴1_ )4+R;qDyMx]BJR\[$Mv#u"_3 2~r/+Pڸe'cK|{fr6JNƴ/g[ID:VƸ Es3iv[TkNa݉BSrcDu4GwOgXiFgbdjzϴ[L R/.f1l_&onkw;foFҮi99>:H&G;jX1Zld1|IɳX)T] cXX{@g?qS%YM:-KN}s)o}saJ FFB$r,O8166a:؍#{qeUp'0}rͻNfمY~oޛhE kЏDORZe;dA!P1Q Jp\<xkVvؕ:* n5yx}\)/~q0i%(Is;JQoW@&I>̗+z'3Nzk]Tihލi_E%U\_Y'뮯| ?~iWi&!"mz4f,bKJˍ[kXBO:UJ!zpK,˶bi5} BHp+4GT.E4zuqjF? S4]QcqL`A%3z|@-ƨ$nu,u83 _@+b/]۟IˣhޏRk͵B$m`x(W\1c+H'GݪTupſCjIw{صj5]cY/EILNJU Xyџ^ιTIf֩@`|KҋXJO[D-]F]|`x`Nl5ITKmYTTΚ_ VÂKTUQ|u| _gKogJ, ?}`#Xj.rRc/K*&!jVfRW!޹GM_qVϢ"h1ᯌ4=lȕ.An#H[rdGsZu8SFm t5*o,?:.+Y}c?a"I~"daX)XGPې8>3'AyJ) Kϩ} E :4ZvSW& >͊@r?6 1h?y$aY9M%~?s؋cL K 8!:InX_F!9Jsab;tql [P(~:Т4V$. ҥeklS۫~ͤ+< ωd.dd%??~Q /)<ցb0wE Ѯ]+'\oetYWpqVWӞȌ8bܧkoY);rb8"UEaEKI%yÅ{6o$*\q ,Xz)95_a F'pדsu炭]j|~${Hk!btb7=!ߎ(>ygtb1y K(37Q1mǬךүL`uY|RuU:ќ%]ʳ7:tD7<{Ns$K'>T< g>q6& Novr,C.2ȸ)H;_@JYT2CESvu:|B:nܺMGºm_oKu ųXEEJeߎ׈(([ b_)bto ̛;\1M"ݽYm8ɨqg?tl KEr*DAI`eZ|j%.,sIau$ Oj*gwc|Kj#:Wf_{E'tv}ph7Mmt'l SOQK$e$M׳>]EO4C! }xNc5'Sn&ߵJ2ip",Z2eu:;)$MU gRBoa\|2cK#װz1u='In.#:h#WȚ]\f9|A:D6Y}M863׫`uWNV}%IǸG4uf?~E_ÉW۵G%[+F7K9a%SOUU`7ߚ(Z8#d`<~J%0C 'Khx7-szD7!Ҧ{ =!'$d$ OsTNzJmBŢM[ ~ZlZ*Q6tz}n\YjEf4sۉʑbgce P| >qH %t0/ĒU+|ҟX/BZ~H/UqL5ZU"u9+Lqy@= RhAWpMX2 1809{iNb?AakRiv =g!ta( 39_c{ >PǛ)Z_,?ky{[uEs|v3(NHrtB 7>Gbmtʔ"gVX_gP!3=hӣ!c23>5!ָi~5:DxX'+= ͢s+ hk؛xhȿ3Y!Z0PhW d L>mrxiA>kLQM|-?ȊQ;3ȭ0)lE]ƛ`=cљSp6Jx"+끇 LQrW"5k |PM8.H^Ֆs7EYȤ}EP, tU#DO/ɍ4+a{29eiXmUҮb:#C`_osB 䑃y[Y6A&eaBIX.!7wO8N)ҳ9>]š`StaNK?ˋdtw6Pw]pΣp{bt8rQmdه5  "+GLgʴs9j? dЉ4vѢU5}6[+{0p<)G5zu9[.zUc풇2$]L4Uy hߨTb""%Btm 6 'طF(׺ D#FWhnvˏW kGFNc0/eR@cC: AE |,d`.BW9 wSߏb݉nG)ڟTkPp\%qe9{Z&[M&il,[_>)t#ݩr Y4鎡;ꎁC*xZ}(h̎+Jqq_%kkΚ_6RbS.0ԫX L I^1ldBj[,!K,v1&L.g{.筵M-{g g^ .IZ;*(? F&~c3+"GޫKck_0 S[Hk;nwod/ >-4m=M?C0Z5A `J_δKYp&F+)] ْ//>|Ga~EZ uU a ǝUy eri<n[ҘJHuw J Z#!9I.[hі S@ϦA$_ X߻3٥HOMRs!\jG v6a÷S2ƮE[YLѱj:mhR^kL'`l!e6=/EHp 7ѯw!M"?If6tWoT̀1T٪\,F0{!,=լ$x6Ë.)tZe@?(h{jx#j|'Gq_5($ƛ8(+H4-yzK ErNOrA#x=?]td;^Sh'Z%4ޠ:|?@xZT}8;}B_:f;}< b_%#|x"9|)46 1g cLMGq+䕓.9Jˎ&؃F|?K-fXZ^ f~q!ce@"Re=c< χB, eRZ%rQs&"̬ЮtkURmjSK,\'8a@jcJ F"IKmUZ 5Z)*ZBҀ' *n[*b!ȧ>8H^4BLkq0|BFL'=Z~2"[-wO3БE,q-6>=77˰LIT/Qⱛ?53)6]6Br p}*'ԑ thX.:M'X;k\xo)TY?4 xqiLXC;RE3SMϑaPJZx )+:#)3{oJ_*w~]ĵ.v ^MEՌ1vͺ0 nk;ۭXZy.`"?='6S=6~3~XYnl~K|Z)|.}댆40I@~"F'n4J7S+HS CEqmz\[5UR_d4~l,qU&BH/PQ?Jw;1?X ?x6M*JjOL N͟t,s{ndP Q+r"W_ȾЇh48!o^6cAR\5;K9$qc^,'|5ptR_}CR,^=PHȼ{pR\ /Cp 7!;qM7j$=|;,n# 9GBe>{;֨H)e/g %2曐sj._\ڞ80zz)2k e~eQ@jA hB:ґ Sy/\.t ]֛yʼlx]f*Ԅwd04Gc ߬0묒itBkYNA$)#4EV< )@wc^m ނIE佞B)eRpZ.MBDҧTͤ1Rңb&2Hwg/g ڠ=phHl^uJ+?EhAy* TnD#Rzi%a,?u,Tiqy:O@K];4A]]eJ Jnw͢;>o3.\r'-e1Qm9DC#;؄>U`t{!}5Ya*zƦUXQxIݧ&rGaAa![,?\'f3VO 5>| %BOFPjqioi3YQYv6Vv㢻ʄBOQn% +:q>bɂ.OAH=u sAG񊏠F 0 h^ag`^:h.FX;k{ygoo,ן( ]܀ϽgH3r8(Hme\?,[݈s@((-z)rATߙ3kEFWZ(=3I&d?-@ŹޕCVR,s iPMǨ'\q*7SeQzOBMW_VU@AݩV'7;}n/(N!X`AتÊcu4,׋=;|\R i*Ԅ>.@֨wOy%>yʃ9yoBK }yG7ts[w+{yXrG{G1:32!GH]]7)(^1;[r0UIns`Z'Dg<͖g-J8iAXbL4~{ҏc$Dz ~/W K/Izk r1U^~nfk1zw`xKueH֠lb8D ?CX7e&692#2r1od@{%}t 8G^ #vjkFERӺ?!,%FRêޓ&0UIA j \ Г`%/VG,1vG p?“qP]{I^Ƙ@> ќ+vkk- >tGl˞V1kY3R.<cJ&Ao/{ VFG>>4FVA%sd0eeoII +}#YRQ):mI7EH+ DTz7'bo;3Qcj<z H3fFCVy=!p8Pg5ULJ &f͠ruç>zG}CI튗hAr{>1c8 Tif怭XOQp"(hhBUtWZFM3IB7&7 E!׸nl2j1gjp8mir!/bI .`@~Gsp#\F/ 52U'u)$7xc0l:֩g6_A3I?޲H)7Y@HXwˆ̾>9qݐʱ;o8Mn[?ߗ猪gZ.qF Ej˱pIٽB7̉ O24 g5\Z;h5?  )1׼gU;*Zow7|^x29Usߢ vMɿeF0^޿iױaLɹY`9m Md^Ȩ0C2}N}%aЄ*" NЙuw~V,J)LN$ҙ5 |;( VJ *+>A^in]C_ G+/2,26_iB\omcōSOӕ rt߽ޛ&?l9I}|R m)^?1%s4rI,Can^'@̟?0sLUPihPrbT2 Hro fE1>rF哂kj; oҳ\ɊZxD| 52*,0M^# QaWbx`{?/ 8D fYqX<SX|Xˌ Bog==HFMqzo!-ؘg'b7A:\G6}7J*]q|Q;R0y7h;!m%x!לA܁R]K.8f/+b2&MBWˏ H^dZzmNm\X8*.CSD= 11w wzԴ& vlTK-]Al q Id,1xyB;c_K1*va1ٍT\S%$/[OnNI\O" >}t"mZ~Lz X-R  ' /3H2?!߬2?݇|gV Q?v|8%>^c4mk$Q~Iqu\d"*U A SUo1xm_چo:=f|ScN#KMT:zGSO(WR#|1wH_]Qbo-/-JVfj-e3:k{܀G+z*u4>RD͌,ӔEr(^ghMC1dB[,+Q$7BXf;0,Tk0dB2ƒ&2ZU[0̐yB myhMKSE%P3+ںnT{I'8?R̗L7O<@J#5~չbpa8#`^ r樨(h X ֵNTӇn05wW uТ:2d@%B=hIPj?gӽ)El<к1E"1taRee$H![r|~yjjRN }d*+_[ R k$mEc SgA@m@'w.6<7`, åV-Enz/֡DAƒqs{8٤e "+Fm!} {|l[b;mk k̠pFJa[ K9mS=Oô׺du 8zW])`yF\G;$阸qC%71i2p!Uɵ [tS1KuWD3(>mSX&ĺ.?իg:3_OJ0Bnr4ZI"ߴlWEE7 oF*9 ]b^g}ơRk#Y:V\JQsLvYvDP/׺A(yPlHB h wJK'p䷍u!s;#iT6Cw5i(K 4o*AybBJi_ vVIu|hQic['Z5N`§W٢IH*vƓABlJ8$VǎЛ¹f蓓Bt-탲rrM#{Eg}"SW!УL!iDH:!N)/!\pmYn>K-C9= Vz~3\y5U!! [$O~E1/e5jRa`پq8KU/4L\x\Y# *( -hQw-۠kR,4;_bhw .lib6&o}&g ;Уsj!'#O`"j? u Ui YkU/ r84 Ե&(À qO@6e<4$Lx甗t0i4?Kij~{-׬3Wˎ =m>49'|wL`+i/Yĸ ⴯Llvqy2|ڞ:qniԚt>j2SDojؽkvfqޕroO+d9q|JOR:%٠uʌhUɧ$jqd{"KNd}rt}J33lKk(R d%Ն}~[sf1hëP=>Si# L]kX(<˞XGĔ]"8a'#8:&"2[?#d3 [D/e׏C lf%KjyOotX )a8P FRPtocz12;g{>>-K'12%E7*yc4/\u//44 n"2queDIoLV9 *의s$S=x|oOPPDe)咟|HSP*p"TEr'v1a|t .A1[e'A.U\Ln>QYxý(@\G.%(cGwoY~}몐rC,S^_&̚K J!5ʹƗ)SBe!&$ZD,Wgugr 0lX?E[iJ| /*À 0?l2C?2%EĺjCЊɳN|- 5[pR4mkrMťU,wJл`fsGqy9 bsT*~|w;!o%89E>!B|8k[2,ҹa</cf ׇߣ 5C9"0}3e@3(e5ƕAEel7lob(T&sC`î2c H헷bfu_rv-,E1@8jN?p^tgvZQ$ܓ1ʻM L:=\l<*E]N!.T6>|` }B@*wQҸ$}X$xZ)*&0AΙ*%C胱٫ Sn۲'!|ISrԯ#t> O=Ė`=fXjQzV5|TM"f!ySWK㪚)2>gz']<Ǯ8e[g@dM IPhs\쌪>f)evܻQyz_an2{E])J[& jOH!+n?/rK ۗ1"p:䊖@3cct:C ɺx[[˚>33pJTGXnۛ)_x})2:)bV!g}jp,yZka( uGCpE@шgnM*K0wZikl$KnQmSԘ]P'b4V9 qx-#sLYbr_%o]/aUK={U> 1MO%1=" J 볺nafQ ay<хNdnĎBG *r'|(;;/I[dV+3IV\{ۺ b@wH%ЫvUß'YO]/y ֛^P6 G IЫd PGV 6Z^h$JtYXr#&9W\MgT2l9kmNqoG2޷fi\ 9Ѳ gJ-^y mq1 ʼn$P[{`v1_T(j-V=o=#]a!Gq݊f\GsgF ∾dݵKey TO^}v23+ )3=c"F6N}bk+ xʛƵƫT".\I9=f a;I8SK-)RMs}#Dw"w c](O8Xo8/acu\?A+z@w~$h+:,&Z,l/֜'V25^)oiz& fDc2f4]v&~+Gܴ&OL\4Ɖq1*A%B$7uBg3~p(M aʾ+=Y_xoNFBϺОdZRL%9aXKnF=*'( f'0s/̳9|:4/R< LA8Z|h_B)uqΰvHǗߎVLepxwTBC %Vfv\{2%6Yp}Ci .hUe0 YrUwOE^u7}Lڦ*3lm*j: 4%PM5]n&\v{xJ8&O^2y64Bv(\ҳvDH&#}sꇾ>X^|Gy0nwL LͿ#ll\7Ol-&5''![cf Q~1VKG3Y D:M7RMu3(M'mIږk @MU`X5ƙʓ1,)!kd {>!oc)'rʐ 𮛛 XMS\؟*+ 4C `uXtHIxEfvvnJ|/x(])4ka0T܄_32$ E *s^$>4#Yz9zX:W)J6#>̽1BE"9WQșG!;1ps),֟tϤ`6?#LD. (g ¼.zڋ @p BwtQ,^ p]i2r&H/ ?OhڬU/R blԶ,I޺^dޅ̪u) . 3p" "= |%x"s(0w2괫ڶNϹ &8H4 ^~ɋC lCP_Lk cCjӁ%ݲ:XgIʂpZiwF4 IuF|vγ.}A! eu?0} kUΩPN[]a B6#0C@]8_߂ oB7KO>[ 1ɝ!}PwR#}Tv%{T0Nah/i|%7(tuKv.mǧ=TXKR瑚ɉI=_e*j`M]{9 E\fq U?_/ʘHq?皼0b<'s| c%1Pvq7Uej6en7H" b(MsWupC@7MJSKO?>O 0v`^Ium+A|.@1-8i1t:[ҐĄYʕћ-) n @sf,.wa/V&#u ]Pg. x(sjsr`P:}Y]ב@v3u%lVN}2f|?D@jeL1ę * #_&*\UB|c{H.m9 -(u'+QB/ h\-ZNo,?J=ipj :!zQ=| ~_O8.M-7%DzINŻ"}+'$ojȹCwOR{zWv@?%Z%TABo^oo/m(*Q`~Vh}bnT(̢meE]"XVxP&&gA@ޔgb.iO>%i+ʱM*s,|4<WB7Ǫ1yFMN(dVqÇ]swWl+iNF@? We/I59MAN! +|KMjpϫkf o$rrיSa)]'* hޢio}Op(Nw^UOk3l+6ގt @7P]?]w"z/TcmV_Xe+[ml+j|іsAnntvQ&~S[*O/ h^C0DL[v{,p-^vx&ɗQeհa/4&L_!H'-?ݮJ1GDY<'@5iHwβ1̓$M[mt*Yz%UkC\`jk-ȥ.4lR'=4n?;KUWn .J?3버g%wV 6t)"B-q.@v{=n-YxɲK8 0@LT!6:>C.h-+[f\ ,S"kNQ/{(]A9z[szZYɵ8wS|*7Bo풒s̤ra:m'ʫ[6[ /)Cɶ@Z'4 w^j e((/JS,2Vɏqc% 'A <[;CA!"Zar4זTG«A \"C(^<َSäci:@IrʯǯA{]Ϟ05þJ Z0̢x *hkٛfOa)׉;m ҮIk{&<$QM1EUw^xkSz̃8),! w ]tK/mc {,㫝ΑWh;2`\Mɞ̎/yԏ No8e)6o~ռ-1jt/ϼ`B9ʡMLB*Ph{k?v33~Uo{Pe| ? k`n+p*վ2cjTm^#бc4 Ǭ+g殡y]y;N ⷻ⹮1$B`yIE1Vphx16y;um`?>|m4ř~ԪYT9ecoim{;j@タ*NtS$KiȔʼnuWKq2}@Lt=3r9>I*܉ *Q簷\N~)yFZOu|Dׅ~l5ƅCv^%ĴD0><<3l︼ޑyjHͰGYQgt5S&ǦiomT(xfj+GeM/"D l`l:BKێ(>u6 71Iї_i[~b,T)FPwܳ}٩ZU-^K{X;S.,]ӭP)$SY#z$l\ͪwCҕ:u( * _2^{=H~QZտqXD챑 `%'j¢dk)6/FU Va]m)m]A6x"j G{MDA[v6Q|רL\|1V?X=4$vN3~5ǃ>Pԣ n[d?{#*!TS MD`DGr^;O1Q#6ܰrk{+`&lHNʲ;',wf#'t#o '(+Q^KV>yF*H`RLx*42.$ph/cZ~lGiG49@n*wFnN0$sv|vr}Z!qT,2nK8Q@{;M)8 Z -3#?"-1BAWYg4Ojjj#?w:$:Wח&z3z?.x7[paz>U 8*|x `"uKW"5Es)ELJ|1lܺߘ0*}ĖW#a=`iw0Ě⏃10V~BSίf=vL9)Yg`1]h|jRm^p aU :+kkjDR./}\rBs8޹SEI"ֺ\!;jeu߳ X݋Ґb~V.4*IeA₅)2( %S/cC k(2aGVP?&IlYɺmUw훣S$x(&,Y2`S#E3n#ܖ÷9=poq,0erL;[/9Gό}7suGF}3ȪAXJ8l7<͆pz`#єm'Ui>_cW *3 L~{gRr]X{2I`u,cy[Nw@EO^١ `>k#i]lJA(D\j\^{E@-" )5݅p߽ 7_i(GLq 4*uqotG5 DegxhlĵsBC ePzA͇"xwH™r2*:`6O5Zl"arUpġt{b>:h_#"T| zvC?kTh3:~2-'=2MLjv=ɱG`'-w2o(m\ݱ(ųl2f]WQ!3dm pWo**俛gW%)<=~*lOں^G0$45!RbW?WP7+ZceEIhg>+e|ĩ̕cK:Z9|тJ8ȡ^w&.٤%wxxp!"գ ؾ~[Y 6~N.g1DX? z5Wp#>A=Wctֿ.oE:PrJP2~oCT{hLp=KT:Ra/!oP:|xv۰-6||p5AB#a dlԍt妺ֻHGg揜0pz;1VnAPtiuy M%UXK5*n(f<ЛzZ?!&ZQJ߂4\)*YO!R%&t{tA{NHbU;"Β,"їDуLR|[@kڛ/>U/p[23cTƳ8#͋Q+S͗gx*Q 0~VgYfcl%*=;,}_-qY_fՄ ULX&Wf%|v‹y/j|qdO}A1Ba|?;5V ĿPGquGmV[:+>%-x;qn,}o&2\"Lz5 Yݓ>2^L ZEu-4R2I !n;T-?dĻ'7~?lqKޒ=kN8^j3#BOiehTN33tm,v-?f EpZDߧ$+iϹY"҄?lFdT-G~ultwUe4S'tʠquc~HWP<Ω6}  i69%`J><{ z?7gxi%!S ^G7"H`3"LC ƣ{G8,s h̷tˍcRe1nj]e6ñSd5&$>yeשp "Ŭ@8E6!-ni-,wp_u٩yjF"-( h rdh{fpKuDٹ4rtO!: :a$b(5֑n#NrC.uYPrKۼ־OS8DrO"o#JW^c> T8백 ` <~t絗LT4chIdb-nÅb GʞJלr`n_q!>IAsZN3Guf⽑4=y\2͕$\P{E~ /ȸeƣZBҸ'!p=de'y y ?}Dbkm˜ey UV.M8z{`u\Ws95qH{Pp<뼝}7VsCY'ХJ_W ʺe 3{OutG;BQ"6D8Hp)mi?qk8>'ikXO]/Xp4!LLأr~s<{SV Q:ȋq?|JC8QUCdnWHfq-Pk)ӥ'9oJk aWRg?/`Dzg<Kw?\, 2a#{Ƀ_vf]3 7".F|l@>DD^‰&"{`Yd%4zÄELz^Ϟ۩jkc]_iexCG;c?ƶ<(U)wC`z}Bk"ɡHTKBĶc?H'ō#oL;aOfvtߥxR%ʘzA\['L323v̾֝ dV':ݩeg&N;8 >>e *)?}Cpj 䍾FV.קX鳇Ӣnæ)u'TVrBH/V^dl?8wADK'2ꝹNN H=2ۉ͵*`q6 |AZzNO2>Z6*]u33Ƶ_q? l/FrDvbZCja#ЛՄҔ26M<-r)M@$рݡpÛ灛/M0 D 4oꢞz3Y&q>ugNmiU\:[U@"M8!y9\_Bp$r܇=rpM6N5!U|ȃ:Pl"_J)15.ŌQ4 DBrobxl,z.ZcIE"(Wfi-~;@{ <j̀aSpx O ZY8ћ7]z/I$Xy?oMDoHMq \ٸ\WkƇR=ԤOͲ#s jY"YlB#E~4R6(^ɺf'N"AnS ;{ p>6y-ĆCaiנ5Tb +9JIPPͩ"t[e%e|` BIHh9 qZ Kڙy=zDcŽU\ٕ1rrUA\4$mgM‰q#}{*gE/kTH]jѴR D$ fmx;V*(b6c0"7Tݮ?*Nm1$rϨ~q\혹* [y-k@|M/fTY YZ